Assess production viability of security findings by verifying code reachability in optimized release builds.
npx skills add https://github.com/google/mantis --skill mantis-critic
Please help me install this Agent Skill. Skill: mantis-critic Source: https://github.com/google/mantis/tree/main/mantis-critic Command: npx skills add https://github.com/google/mantis --skill mantis-critic
This skill filters out false positives and debug-only findings by verifying if security vulnerabilities are actually triggerable in optimized, production-ready release builds.
Run the mantis-critic skill to evaluate the production viability of all findings currently stored in the workspace directory.
High-intent search queries and answers about installing and using this skill.
Filter debug-only security vulnerabilities by assessing code reachability within optimized release configurations, ensuring identified flaws are triggerable when assertions are disabled. This confirms production viability and removes theoretical debug-only traps.
Production viability assessment distinguishes actionable bugs from theoretical flaws by checking for debug-only code paths and assertion traps, verifying that vulnerabilities are actually reachable in production-ready release builds.
Validate memory safety reachability by operating on an immutable codebase snapshot to perform drift analysis, confirming whether the vulnerable code path survives in an optimized build with assertions disabled. This filters false positives.
Yes, verifying code reachability requires integration with Mantis state management and workspace findings to perform accurate drift analysis and threat model validation against pinned codebase snapshots. This ensures precise production viability assessment.
Snapshot-aware verification improves static analysis results by using immutable code snapshots to ensure findings are evaluated against the exact codebase state where discovered, preventing drift-related false positives and inaccurate threat modeling.
ChazzCoinRegister new sub-repositories with an orchestrator by updating the manifest and cloning.
Factory-AIIdentify and validate security vulnerabilities in code changes using STRIDE threat modeling.
outfitter-devAudit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.
eliottbusinessAutomate pre-commit code review with static analysis and security scanning.
