Google Mantis: a skills pack for security review with coding agents

udmrzn · x · 2026-10-02

Google released Mantis, a skills pack for security review with coding agents, installed via npx skills add google/mantis. Key commands: /mantis-threat-model builds a threat model from your codebase, /mantis-researcher scans for vulnerabilities, /mantis-review filters false positives, /mantis-reproduce writes a PoC and runs it in a sandbox, /mantis-patch applies a fix and confirms the PoC is blocked, and /mantis-report generates the final report. Since reproduce and patch execute generated code, the author notes it's a great use case for sandboxed agents.

Original post →

More from coding & agent

coding & agent channel →