Extract Historical Security Fixes with Mantis
Past security fixes are difficult to track across repository history. This skill guides an AI agent to extract, classify, and cache historical vulnerabilities for later analysis.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "mantis-history" from https://skillstore.io/skills/google-mantis-history.md and its manifest at https://skillstore.io/api/skills/google-mantis-history/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "mantis-history". Illustrative request: Extract historical authentication fixes from this repository.
Expected outcome:
Using "mantis-history". Illustrative request: Analyze security history from a shallow Git clone.
Expected outcome:
Using "mantis-history". Illustrative request: Analyze a directory without accessible VCS history.
Expected outcome:
All 58 static findings are false positives involving Markdown, legitimate workspace access, or read-only repository checks. A separate semantic risk concerns sending repository diffs and messages to unspecified LLM services without data-sharing safeguards. No evidence found of malicious commands, credential theft, or an actual prompt injection attempt.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/google-mantis-history/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/google-mantis-history?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/google-mantis-history?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/google-mantis-history/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/google-mantis-history.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>google. (2026). mantis-history security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/google-mantis-history/audits/1@techreport{google-google-mantis-history-2026,
author = {google},
title = {mantis-history security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/google-mantis-history/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mantis-history security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "google"
date-released: "2026-10-04"
url: "https://skillstore.io/skills/google-mantis-history/audits/1"
identifiers:
- type: other
value: "skillstore:google-mantis-history:audit:1"
description: "Skillstore immutable audit report identifier"
Build a repository-specific database of earlier vulnerabilities and mitigations before a broader security investigation.
Review historical fixes by component and vulnerability type to identify recurring maintenance risks.
Generate state-relative historical learnings with cached records and provenance for subsequent analysis stages.
Use mantis-history to extract past security fixes from this repository. Report the output location and any history limitations.
Inspect this repository's stack and choose relevant security keywords. Extract historical findings and explain which commits your filters may exclude.
Refresh historical learnings from the existing cache. Verify revision reachability and repository identity; rebuild the cache if history was rewritten.
Use mantis-history with --snapshot_root <snapshot>, --snapshot_id <id>, and --state_root <state>. Read live VCS history and preserve snapshot provenance.
Author
googleLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/google/mantis/tree/f48a85e8823ee6f4824ae9a24b9b2efb8aab8c9a/mantis-historyRef
17c5d34add4a2cc29dbf3b76753657cb3b83523e
Maintenance freshness
10/5/2026
Usage
0 downloads · 0 views
File structure
📄 SKILL.md
Publish Google ADK Agents to Gemini Enterprise
Publishing ADK agents to Gemini Enterprise requires the correct registration mode, resource IDs, and permissions. This skill guides Claude, Codex, or Claude Code through safe CLI registration and Agent Registry management.
Build Google ADK Agent Code
Developers need reliable ADK patterns when building Python agents. This skill provides concise references for tools, callbacks, state, multi-agent orchestration, and workflow code.
Scaffold Google ADK Agent Projects
Starting a Google ADK agent project requires several template, deployment, and workflow choices. This skill guides agents-cli scaffolding from prototype setup through enhancement and upgrade planning.
Monitor Google ADK Agents
Production ADK agents need trace, log, and analytics signals without exposing prompt data. This skill guides Cloud Trace, prompt logging, BigQuery analytics, and provider choices.
Build Threat Models from Your Mantis Knowledge Base
Architecture notes often leave attacker access and trust boundaries unclear. This skill turns existing Mantis knowledge into a structured threat model with deployment intent and snapshot provenance.
Evaluate Google ADK Agents with agents-cli
Agent teams need repeatable evidence before changing prompts, tools, or deployment settings. This skill guides dataset design, metric selection, grading, comparison, and failure analysis for Google ADK agents.
Build Defensible Attack Trees
by sickn33
Complex threats are difficult to compare when attack paths and dependencies remain implicit. This skill structures paths, scores leaf nodes, maps mitigations, and highlights defense priorities.
Master Advanced Git Workflows
by AutumnsGrove
Complex Git maintenance can make history changes and conflict resolution difficult. This skill provides structured guidance, recovery steps, and an optional local helper for common advanced workflows.
Review Code for Security, Quality, and Performance
by AutumnsGrove
Manual reviews can miss security, quality, and performance issues. This skill applies a structured workflow and optional analysis tools to produce prioritized feedback.
Create Conventional Git Commits
by 21pounder
Manual commit preparation can miss staged changes, message style, or sensitive files. This skill reviews git state and helps create clear conventional commits.
Standardize Your Git Workflow
by Atman36
Inconsistent commits and branches make collaboration and releases harder to manage. This skill applies Conventional Commits, GitFlow, review practices, and pre-commit checks.
Standardize Team Development Conventions
by DevanB
Teams often lose time when project structure, commits, reviews, and configuration practices differ between contributors. This skill gives Claude, Codex, and Claude Code a shared checklist for consistent development conventions.