skills/google/mantis/mantis-advise/Gen Agent Trust Hub

mantis-advise

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill invokes a Python script located at reference/scripts/advise.py to analyze target files and query a local SQLite database. This behavior is standard for the skill's intended purpose.
  • Indirect Prompt Injection Surface: The advisor ingests and analyzes external source code and database records. While this creates a potential surface for indirect prompt injection, the skill's instructions emphasize secure boundary enforcement and validation protocols to mitigate these risks in the development process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 03:30 PM