技能 mantis-calibrate

📦

mantis-calibrate

Name: mantis-calibrate
Author: google

內容修訂 r1 高風險 ⚙️ 外部命令📁 檔案系統存取

Calibrate Mantis Security Findings

Security findings need consistent priorities grounded in exploit evidence and architectural context. This skill applies a risk matrix and documented caps to existing Mantis findings.

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "mantis-calibrate" from https://skillstore.io/skills/google-mantis-calibrate.md and its manifest at https://skillstore.io/api/skills/google-mantis-calibrate/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/google-mantis-calibrate.md 已簽名 manifest GET /api/skills/google-mantis-calibrate/manifest 已簽名 lockfile GET /api/skills/google-mantis-calibrate/lockfile

測試它

正在使用「mantis-calibrate」。 Impact 4, likelihood 3, internal exposure, viable production finding, and no additional caps.

預期結果:

Risk score: 5.6. Priority: MEDIUM. Internal exposure applies a 0.8 multiplier to the combined impact and likelihood.

正在使用「mantis-calibrate」。 A pinned finding has failed reproduction, but its discovery snapshot does not match the active snapshot.

預期結果:

STALE_EVIDENCE: reproduction evidence does not match the active snapshot.
Reproduction failure rule: UNKNOWN. Do not force LOW based on stale evidence.
Keep the conservative calculated score and record the provenance warning.

正在使用「mantis-calibrate」。 A viable finding has an unresolved physical-access prerequisite during calibration.

預期結果:

Calibration is provisional. Mark the physical-access rule UNKNOWN, retain the calculated priority, and request evidence resolving the prerequisite.

安全審計

高風險

v1 • 2026/10/4 開啟版本化報告

All 203 static detections are false positives involving Markdown syntax, workflow metadata, or descriptions of vulnerability evidence. One semantic finding identifies helper reuse without integrity verification, enabling code execution if an attacker controls the workspace helper. No evidence found of deliberate prompt injection or data exfiltration in the supplied files.

已掃描檔案

914

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

高

SKILL.md:554-560 SKILL.md:562-572

Workspace Helper Reuse Without Integrity Verification

The skill executes an existing workspace helper after checking only "# MANTIS_HELPER_VERSION = 2". An attacker controlling that helper can retain the comment and execute arbitrary code with agent permissions.

The instructions explicitly combine helper execution with a first-line version check, without requiring body verification. Exploitation requires attacker control of the workspace helper; no malicious helper is supplied.

風險因素

⚙️ 外部命令 (50)

📁 檔案系統存取 (7)

SKILL.md:29 SKILL.md:71 SKILL.md:77 SKILL.md:95 SKILL.md:97 SKILL.md:117 SKILL.md:92

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/google-mantis-calibrate/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/google-mantis-calibrate/security.svg)](https://skillstore.io/skills/google-mantis-calibrate?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/google-mantis-calibrate?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/google-mantis-calibrate/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/google-mantis-calibrate.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

google. (2026). mantis-calibrate security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/google-mantis-calibrate/audits/1

BibTeX 引用

@techreport{google-google-mantis-calibrate-2026,
  author = {google},
  title = {mantis-calibrate security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/google-mantis-calibrate/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mantis-calibrate security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "google"
date-released: "2026-10-04"
url: "https://skillstore.io/skills/google-mantis-calibrate/audits/1"
identifiers:
  - type: other
    value: "skillstore:google-mantis-calibrate:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Prioritize Existing Vulnerabilities

Calibrate completed findings with exploit evidence, exposure, and blast radius to support remediation planning.

Review Project Threat Context

Apply project threat models and asset criticality when assessing findings across internal components and public interfaces.

Track Evidence Across Pipeline Passes

Record snapshot provenance, stale evidence, and unresolved calibration rules in finding histories for later review.

試試這些提示

Review Calibration Inputs

Review my existing Mantis findings without modifying files. Identify missing reproduction, viability, and threat-model information needed for calibration.

Calibrate a Finding

Calibrate finding [finding_id] using its evidence and threat model. Explain the score, priority, and applicable caps before updating the file.

Audit Unresolved Rules

Review calibrated findings for UNKNOWN rules and stale evidence. Explain which priorities remain provisional and what evidence would resolve each warning.

Calibrate a Pinned Batch

Calibrate findings using [snapshot_root] and [state_root]. Verify pass alignment, preserve conservative scores for stale evidence, and review helper integrity before execution.

最佳實務

Provide reproduction results, production viability, attacker prerequisites, and a current threat model before calibration.
Use matching pinned snapshots and review every stale-evidence or UNKNOWN warning before accepting priorities.
Back up finding files and verify complete helper contents before executing generated or reused scripts.

避免

Use calibration to discover new vulnerabilities or implement patches.
Treat missing reproduction or threat-model information as proof that a finding is harmless.
Execute existing workspace helpers solely because their version comment matches.

常見問題

What does this skill calculate?

It calculates impact, likelihood, context-adjusted risk scores, and priorities for eligible existing Mantis findings.

Does it find vulnerabilities or fix code?

No. It calibrates findings already produced by earlier pipeline stages and updates their reporting fields.

What happens when evidence fields are missing?

Missing viability defaults to CONDITIONAL_VIABLE, and missing reproduction defaults to not_attempted. Applicable rules can reduce priority, except where stale-evidence safeguards apply.

Does calibration require a pinned snapshot?

No. Without active snapshot state, it uses default mode without provenance checks. Pinned and HALT modes enable conservative stale-evidence handling.

Which files can it change?

It updates workspace finding files and creates a reusable calibration helper. Pinned target source must remain unchanged.

Is the helper version check sufficient for security?

No. A matching comment does not establish integrity. Review complete helper contents or regenerate from trusted templates before execution.