mantis-patch

Name: mantis-patch
Availability: InStock
Author: Google

Generate and apply minimal security patches with transactional isolation and automated verification.

731|84|Updated Jun 15, 2026

Search Tags:#automation #security #vulnerability #sandbox #code-review #patching

Ready to run

npx skills add https://github.com/google/mantis --skill mantis-patch

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: mantis-patch
Source: https://github.com/google/mantis/tree/main/mantis-patch
Command: npx skills add https://github.com/google/mantis --skill mantis-patch

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the challenge of manually applying and verifying security patches, reducing the risk of human error and ensuring that fixes are both minimal and effective within isolated environments.

Core Features & Use Cases

Transactional Patching: Applies code fixes using shadow directories or file backups to ensure the original source remains untouched and safe.
Automated Verification: Re-runs reproduction scripts against patched code to confirm the vulnerability is resolved without breaking existing functionality.
Use Case: After a security agent identifies a buffer overflow in a C library, use this Skill to generate a minimal patch, verify it against the exploit, and ensure no regressions are introduced.

Quick Start

Use the mantis-patch skill to apply and verify security fixes for all identified findings in the current workspace.

Frequently Asked Questions about mantis-patch

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security patching and verification for source code vulnerabilities?▼

To automate security patching, use this Skill to generate minimal code fixes and re-run reproduction scripts in a sandbox to verify the vulnerability is resolved without breaking existing functionality.

What is transactional code patching and when do I need it for vulnerability remediation?▼

Transactional code patching applies fixes using shadow directories or file backups to keep original source untouched. You need it when remediating vulnerabilities to ensure code integrity and safe rollback.

How do I apply minimal security patches without introducing regressions in a C library?▼

You can apply minimal security patches by generating targeted fixes and running automated verification scripts against the patched code to confirm the exploit is resolved and no regressions are introduced.

Can I use sandbox execution to safely apply code patches in automated pipelines?▼

Yes, this Skill operates within security-focused development pipelines using strict snapshot-based state management and sandbox execution to apply patches while maintaining code integrity and auditability.

Does automated code patching work with snapshot-based state management for isolated environments?▼

Yes, automated code patching requires strict adherence to snapshot-based state management to maintain transactional isolation, ensuring the original source remains untouched and safe during verification.

What are the limitations of using shadow directories for automated vulnerability patching?▼

Using shadow directories ensures the original source remains untouched, but patching requires strict sandbox execution and snapshot adherence, meaning any state management failure can compromise code integrity and auditability.