mantis-meta-agent

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally aligned with a security-review orchestrator, and there are no external installer, credential-harvesting, or third-party proxy signals. However, it grants broad autonomous control over a long-running review-and-patch pipeline, includes destructive local file operations, and coordinates offensive security tooling and many subagents, making the overall operational risk high despite no clear evidence of malware.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:46 PM
Package URL
pkg:socket/skills-sh/google%2Fmantis%2Fmantis-meta-agent%2F@a8d554de11c768af568f8ff8a69f9aeb9a4e1383efc318f45ac28310eee791da
Security Audit — socket — mantis-meta-agent