Calculate technical risk scores for security findings using impact, likelihood, and production viability.
npx skills add https://github.com/google/mantis --skill mantis-calibrate
Please help me install this Agent Skill. Skill: mantis-calibrate Source: https://github.com/google/mantis/tree/main/mantis-calibrate Command: npx skills add https://github.com/google/mantis --skill mantis-calibrate
This skill addresses the challenge of inconsistent and subjective security risk assessment by applying a rigorous, evidence-based calibration process to vulnerability findings.
Execute the mantis-calibrate command to process all findings in the workspace and append final risk scores to the JSON reports.
High-intent search queries and answers about installing and using this skill.
Automated security pipelines require consistent, evidence-based prioritization of vulnerabilities. This calibration process evaluates findings against defined threat models, applying context-aware multipliers and reproduction status to ensure scores reflect real-world viability.
Automated security pipelines require consistent, evidence-based prioritization of vulnerabilities. This calibration process evaluates findings against defined threat models, applying context-aware multipliers and reproduction status to ensure scores reflect real-world viability.
Evidence-based security triage incorporates reproduction status and threat model data to ensure risk scores reflect real-world viability. Threat modeling provides the defined context used to evaluate impact and likelihood for vulnerability findings.
Risk matrix scoring works with automated security pipelines by applying a 1-10 scale using impact, likelihood, and context-aware multipliers. It satisfies requirements for snapshot-aware provenance tracking and sanity triage.
Automated vulnerability risk calibration depends on a defined threat model and available reproduction status data to function accurately. Without evidence-based inputs and context-aware multipliers, the resulting risk scores may not reflect real-world production viability.
sean-m-cooperIdentifies and documents security vulnerabilities with risk levels and remediation guidance.
Amazon-QuickParse vulnerability scan data, deduplicate findings, and score risk with CVSS.
Snausage0x45Generate security analyst briefings from passive OSINT on IP addresses and domains.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
