skills/google/mantis/mantis-review/Gen Agent Trust Hub

mantis-review

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • Dynamic Script Generation and Execution: The skill instructions direct the agent to generate and execute a Python helper script (workspace/helpers/append_review.py) to manage updates to finding files. This approach is used as a performance optimization to handle large JSON modifications, though it involves runtime code generation and execution.
  • Indirect Prompt Injection Surface: The skill ingests finding data from files in the workspace/findings/ directory. Since this data is generated by other agents or processes, the skill implements a mitigation strategy by instructing the agent to focus strictly on objective source code validation and disregard the qualitative reasoning provided in the input.
  • Command Execution: The skill utilizes shell commands to run its internal helper scripts and perform file system checks. These operations are localized to the defined workspace and target source code directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:43 PM
Security Audit — agent-trust-hub — mantis-review