skills/google/mantis/mantis-patch/Gen Agent Trust Hub

mantis-patch

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Transactional Modification and Rollback: The skill manages code changes using standard tools like Git or file-level backups (cp, git checkout, git commit). This is a common development pattern to ensure code integrity during the patching process.
  • Subprocess and Script Execution: To verify patches, the skill executes reproduction scripts and may generate a helper Python script (append_patch.py) for data management. These actions are performed to automate the verification and logging of security fixes within the workspace.
  • Automated Verification: The skill performs a 're-attack' phase where it spawns a subagent to try and bypass the newly applied patch. This is a security best practice to confirm that a fix effectively addresses the root cause and cannot be easily circumvented.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 01:20 PM
Security Audit — agent-trust-hub — mantis-patch