mantis-meta-agent
Coordinate Continuous Mantis Security Reviews
Long security reviews require coordinated specialist stages and reliable campaign state across repeated passes. This skill supervises Mantis subagents, preserves findings, and manages optional synchronization and snapshot provenance.
Nâinstallez pas automatiquement ce Skill.
La politique de rĂ©fĂ©rence exige un examen par un opĂ©rateur avant toute action dâinstallation.
Installer avec mon Agent
Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.
Review the Skillstore skill "mantis-meta-agent" from https://skillstore.io/skills/google-mantis-meta-agent.md and its manifest at https://skillstore.io/api/skills/google-mantis-meta-agent/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.
Ressources lisibles par les agents
Utilisez ces liens lorsquâun Agent IA, un crawler ou un script a besoin dâun contexte propre au lieu de lire toute la page.
Tester
Utilisation de « mantis-meta-agent ». What should happen when an opt-in sync finds local repository changes?
RĂ©sultat attendu:
- Illustrative status: synchronization skipped because local changes exist.
- Preserve the current tree and report why synchronization did not run.
- Attempt the requested snapshot only under the campaign's pinning rules.
Utilisation de « mantis-meta-agent ». What should a completed pass preserve for the next review?
RĂ©sultat attendu:
- Expected archive contents: finding records, campaign state, and a copied knowledge base.
- Expected live state: the knowledge base remains available and the pass counter advances.
- Expected report: reproduced actionable findings, supporting evidence, and patch verification results.
Utilisation de « mantis-meta-agent ». The harness exposes no subagent execution logs. What should reflection receive?
RĂ©sultat attendu:
Expected delegation: provide an explicit empty log list and request a missing-transcript insight for each executed stage.
Audit de sécurité
CritiqueMost static findings are Markdown formatting, campaign state references, or legitimate repository checks, not shell execution or system reconnaissance. Confirmed concerns include unproven backup ownership and unredacted transcript access; semantic findings identify self-declared testing authorization and permissive snapshot verification. No evidence found of credential exfiltration, malware installation, or instructions to manipulate this marketplace audit.
Préoccupations de sécurité confirmées (2)
ĂlĂ©ments dâĂ©valuation des capacitĂ©s (6)
Il sâagit de capacitĂ©s locales rĂ©elles qui peuvent ĂȘtre attendues pour cette compĂ©tence ; elles nĂ©cessitent donc un examen, mais ne sont pas comptabilisĂ©es comme comportement malveillant confirmĂ©.
Facteurs de risque
âïž Commandes externes (50)
đ AccĂšs au systĂšme de fichiers (27)
Partager et citer ce rapport
Partagez le rapport dâĂ©valuation versionnĂ©, le badge neutre, la carte intĂ©grable et les citations. Skillstore prĂ©sente les preuves sans dĂ©cider si ce Skill est sĂ»r.
Copier le lien du rapport
https://skillstore.io/skills/google-mantis-meta-agent/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/google-mantis-meta-agent?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/google-mantis-meta-agent?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/google-mantis-meta-agent/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Carte intégrable
<iframe src="https://skillstore.io/embed/skills/google-mantis-meta-agent.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citations académiques (APA · BibTeX · CFF)
Citation APA
google. (2026). mantis-meta-agent security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/google-mantis-meta-agent/audits/1Citation BibTeX
@techreport{google-google-mantis-meta-agent-2026,
author = {google},
title = {mantis-meta-agent security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/google-mantis-meta-agent/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mantis-meta-agent security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "google"
date-released: "2026-10-04"
url: "https://skillstore.io/skills/google-mantis-meta-agent/audits/1"
identifiers:
- type: other
value: "skillstore:google-mantis-meta-agent:audit:1"
description: "Skillstore immutable audit report identifier"
Score Skillstore
Pourquoi ce score Niveau de confiance des preuves: FaibleCe que vous pouvez créer
Coordinate a Repository Review
Supervise specialist review stages and preserve validated findings across repeated passes on an explicitly authorized repository.
Track Review Provenance
Use optional synchronization, pass snapshots, and archives to compare campaign results across repository revisions.
Supervise an Artifact Campaign
Coordinate appropriate analysis specialists for an authorized binary or firmware artifact in an isolated testing environment.
Essayez ces prompts
Inspect readiness for a Mantis campaign on [authorized repository]. List missing subagents, tools, and state inputs. Do not start testing or modify files.
Supervise one Mantis pass on [authorized repository] using [external state directory]. Do not sync. Stop after archiving and summarize reproduced findings.
Run one authorized Mantis pass with --sync and --state_root=[external directory]. Preserve local changes and unknown artifacts. Halt if snapshot completeness or protection fails.
Resume [authorized campaign] from its existing state. Check snapshot provenance and archive integrity. Focus the next pass on [component]. Require consent before sensitive-log processing.
Bonnes pratiques
- Define authorized targets, permitted testing methods, and stopping conditions before launching a campaign.
- Keep campaign state outside the target tree, preserve unknown artifacts, and verify snapshot completeness before trusting provenance.
- Use isolated reproduction environments and redact sensitive campaign transcripts before sharing them with reflection subagents.
Ăviter
- Treating the skill's authorization statement as permission to test arbitrary endpoints or execute untrusted binaries.
- Deleting files solely because their names resemble generated Mantis artifacts.
- Treating unpinned, incomplete, or writable snapshots as immutable evidence for authoritative findings.
Foire aux questions
Which AI tools are listed as supported?
Does this package include the complete review pipeline?
Does the supervisor patch vulnerabilities directly?
Does synchronization run automatically?
Can a campaign resume after interruption?
What safeguards are needed before use?
Détails du développeur
Auteur
googleLicence
MIT
RĂ©vision Skillstore
r1
Avis de version
Lâauteur nâa dĂ©clarĂ© aucune version.
DĂ©pĂŽt
https://github.com/google/mantis/tree/f48a85e8823ee6f4824ae9a24b9b2efb8aab8c9a/mantis-meta-agentRĂ©f
44cf00a7ced88385654599ad1ed145fec23ee8ed
RĂ©cence de maintenance
05/10/2026
Utilisation
0 téléchargements · 0 vues
Structure de fichiers
đ SKILL.md