mantis-patch
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Transactional Modification and Rollback: The skill manages code changes using standard tools like Git or file-level backups (
cp,git checkout,git commit). This is a common development pattern to ensure code integrity during the patching process. - Subprocess and Script Execution: To verify patches, the skill executes reproduction scripts and may generate a helper Python script (
append_patch.py) for data management. These actions are performed to automate the verification and logging of security fixes within the workspace. - Automated Verification: The skill performs a 're-attack' phase where it spawns a subagent to try and bypass the newly applied patch. This is a security best practice to confirm that a fix effectively addresses the root cause and cannot be easily circumvented.
Audit Metadata