mantis-meta-agent

Orchestrate continuous security review pipelines with state management and immutable snapshots.

731|84|Updated Jun 15, 2026
One-click install
npx skills add https://github.com/google/mantis --skill mantis-meta-agent
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: mantis-meta-agent
Source: https://github.com/google/mantis/tree/main/mantis-meta-agent
Command: npx skills add https://github.com/google/mantis --skill mantis-meta-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the challenge of managing long-running, complex security review pipelines by providing an autonomous orchestration layer that ensures consistency, state management, and reliable execution across multiple sub-agent stages.

Core Features & Use Cases

  • Continuous Orchestration: Manages the lifecycle of security review passes, including synchronization, snapshotting, and sub-agent delegation.
  • Resilient State Management: Tracks pass history, VCS status, and findings, ensuring that interrupted campaigns can resume safely without data loss.
  • Use Case: Use this to run a continuous, automated vulnerability discovery campaign against a target codebase, ensuring that every review pass is performed against a pinned, immutable snapshot of the target.

Quick Start

Use the mantis-meta-agent skill to initiate a new security review campaign pass with synchronization enabled.

Frequently Asked Questions about mantis-meta-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate continuous security review pipelines for long-running vulnerability discovery campaigns?

Automated security review pipelines are orchestrated by managing state, VCS synchronization, and immutable snapshotting to delegate sub-agent tasks safely across source code, firmware, and live endpoints.

How does crash-safe resumption work for interrupted vulnerability discovery campaigns?

Crash-safe resumption tracks pass history, VCS status, and findings to ensure interrupted campaigns resume safely without data loss using atomic state transitions.

What is the best way to isolate live endpoints from automated security analysis environments?

Strict isolation between live and analysis environments is maintained by performing every review pass against a pinned, immutable snapshot of the target.

Can I run a vulnerability discovery campaign against firmware and live endpoints simultaneously?

Vulnerability discovery campaigns can run across diverse targets including firmware and live endpoints by delegating automated sub-agent tasks through continuous orchestration.

Do I need VCS synchronization to start an automated security review pass?

VCS synchronization is required to initiate a new security review campaign pass, ensuring the analysis is performed against an immutable snapshot of the target codebase.

Why use an autonomous supervisor for vulnerability discovery instead of manual security testing?

An autonomous supervisor provides resilient state management and orchestration for complex security review pipelines, ensuring consistency and reliable execution across multiple sub-agent stages.