📦

Audit History

mantis-calibrate - 1 audit

Oct 4, 2026, 01:37 PM

All 203 static detections are false positives involving Markdown syntax, workflow metadata, or descriptions of vulnerability evidence. One semantic finding identifies helper reuse without integrity verification, enabling code execution if an attacker controls the workspace helper. No evidence found of deliberate prompt injection or data exfiltration in the supplied files.

Files scanned

914

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

SKILL.md:554-560 SKILL.md:562-572

Workspace Helper Reuse Without Integrity Verification

The skill executes an existing workspace helper after checking only "# MANTIS_HELPER_VERSION = 2". An attacker controlling that helper can retain the comment and execute arbitrary code with agent permissions.

The instructions explicitly combine helper execution with a first-line version check, without requiring body verification. Exploitation requires attacker control of the workspace helper; no malicious helper is supplied.

Risk Factors

⚙️ External commands (50)

📁 Filesystem access (7)

SKILL.md:29 SKILL.md:71 SKILL.md:77 SKILL.md:95 SKILL.md:97 SKILL.md:117 SKILL.md:92

Audited by: codex

← Back to Skill