Build Threat Models from Your Mantis Knowledge Base
Architecture notes often leave attacker access and trust boundaries unclear. This skill turns existing Mantis knowledge into a structured threat model with deployment intent and snapshot provenance.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "mantis-threat-model" from https://skillstore.io/skills/google-mantis-threat-model.md and its manifest at https://skillstore.io/api/skills/google-mantis-threat-model/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "mantis-threat-model". Generate a model from a KB describing a public API, an authentication service, and a customer database.
Expected outcome:
Using "mantis-threat-model". Rerun the model using the same recorded snapshot and reuse the existing model content.
Expected outcome:
All 101 static findings are false positives involving Markdown formatting, expected workspace metadata, or locator checks skipped by this KB-only stage. No evidence found of credential theft, exfiltration, malicious execution, or audit-directed prompt injection. One semantic finding identifies potential archive-history loss when the same pass is rerun.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/google-mantis-threat-model/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/google-mantis-threat-model?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/google-mantis-threat-model?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/google-mantis-threat-model/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/google-mantis-threat-model.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>google. (2026). mantis-threat-model security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/google-mantis-threat-model/audits/1@techreport{google-google-mantis-threat-model-2026,
author = {google},
title = {mantis-threat-model security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/google-mantis-threat-model/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mantis-threat-model security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "google"
date-released: "2026-10-04"
url: "https://skillstore.io/skills/google-mantis-threat-model/audits/1"
identifiers:
- type: other
value: "skillstore:google-mantis-threat-model:audit:1"
description: "Skillstore immutable audit report identifier"
Identify attacker entry points and trust boundaries from an existing Mantis architecture knowledge base.
Regenerate threat-model sections and reassess deployment intent when the recorded snapshot changes.
Provide downstream planning agents with attacker profiles, entity references, and asset availability classifications.
Run /mantis-threat-model using the populated Mantis knowledge base in the current workspace.
Run /mantis-threat-model --state_root [state_directory]. Use its architecture and entity documents, archive the prior model, and save the replacement.
Run /mantis-threat-model --state_root [state_directory] --snapshot_id [snapshot_id]. Recompute deployment intent when provenance changes and default to production for uncertain evidence.
Run /mantis-threat-model --state_root [state_directory] --snapshot_id [snapshot_id]. Preserve existing archives; add the required STALE banner if unchanged provenance leads to reused content.
Author
googleLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/google/mantis/tree/f48a85e8823ee6f4824ae9a24b9b2efb8aab8c9a/mantis-threat-modelRef
afe56992452feed3201cea1348a69613bf5d0a6d
Maintenance freshness
10/5/2026
Usage
0 downloads · 0 views
File structure
📄 SKILL.md
Publish Google ADK Agents to Gemini Enterprise
Publishing ADK agents to Gemini Enterprise requires the correct registration mode, resource IDs, and permissions. This skill guides Claude, Codex, or Claude Code through safe CLI registration and Agent Registry management.
Build Google ADK Agent Code
Developers need reliable ADK patterns when building Python agents. This skill provides concise references for tools, callbacks, state, multi-agent orchestration, and workflow code.
Scaffold Google ADK Agent Projects
Starting a Google ADK agent project requires several template, deployment, and workflow choices. This skill guides agents-cli scaffolding from prototype setup through enhancement and upgrade planning.
Monitor Google ADK Agents
Production ADK agents need trace, log, and analytics signals without exposing prompt data. This skill guides Cloud Trace, prompt logging, BigQuery analytics, and provider choices.
Evaluate Google ADK Agents with agents-cli
Agent teams need repeatable evidence before changing prompts, tools, or deployment settings. This skill guides dataset design, metric selection, grading, comparison, and failure analysis for Google ADK agents.
Deploy Google ADK Agents
Deploying ADK agents across Google Cloud targets requires many infrastructure choices. This skill guides target selection, deployment commands, secrets, CI/CD, testing, and recovery.
Strengthen Application Security Reviews
by alirezarezvani
Security reviews often lack consistent checklists and reusable workflows. This skill provides security review scaffolds, reference guidance, and simple reporting scripts for Claude, Codex, and Claude Code.
Strengthen Security Engineering Decisions
by 89jobrien
Security work often spans architecture, identity, compliance, testing, and response planning. This skill gives Claude, Codex, and Claude Code structured security engineering guidance.
Build pytm Threat Models as Code
by AgentSecOps
Threat modeling often becomes outdated and disconnected from architecture changes. This skill helps create pytm models, STRIDE analysis, and diagram workflows for security reviews and CI.
Model Security Threats with STRIDE
by sickn33
Security reviews can miss abuse paths, trust boundaries, and residual risks. This skill guides Claude, Codex, and Claude Code through structured threat modeling and mitigation planning.
Build Attack Trees for Security Planning
by wshobson
Security teams need a clear way to compare attack paths and defense gaps. This skill structures attack trees, scoring, diagrams, and mitigation priorities.
Extract Security Requirements from Threat Models
by wshobson
Teams often struggle to turn threat analysis into clear implementation work. This skill converts threats and business context into traceable requirements, user stories, tests, and compliance mappings.