Generate targeted security review plans from codebase structure and threat models.
npx skills add https://github.com/google/mantis --skill mantis-plan
Please help me install this Agent Skill. Skill: mantis-plan Source: https://github.com/google/mantis/tree/main/mantis-plan Command: npx skills add https://github.com/google/mantis --skill mantis-plan
This skill solves the challenge of maintaining comprehensive and efficient security review coverage in complex, evolving codebases by automating the generation of targeted, risk-aware audit plans.
Execute the mantis-plan skill to analyze the current directory and generate a defensive security review roadmap in the workspace folder.
High-intent search queries and answers about installing and using this skill.
To generate a security audit plan, this skill analyzes codebase structure, threat models, and historical vulnerability data to formulate a targeted defensive review roadmap. It automatically crawls your directories to produce a structured plan.json file.
Incremental code review works by utilizing VCS-aware diffing and dependency-graph analysis to focus security reviews exclusively on changed components and their consumers. This approach prevents redundant work and maintains idempotency through state-based tracking.
Yes, you can use threat modeling to prioritize security audits across diverse targets including source code, binaries, and firmware. The skill maps boundaries and prioritizes investigation paths based on the provided threat models and historical findings.
The best way to map an attack surface is to execute an automated analysis of your current directory to map boundaries and generate a prioritized list of high-risk files. This ensures recent changes and critical interfaces are covered first.
Yes, this automated security review tool maintains state between audits by utilizing state-based tracking and idempotency. This ensures exhaustive coverage of changed components without duplicating previous review efforts.
Focusing security reviews on VCS diffs and dependency graphs ensures exhaustive coverage of changed code and its downstream consumers while maximizing efficiency. This prevents redundant work by targeting only the modified attack surface.
googleGenerate security-focused directory summaries via bottom-up repository traversal.
nishilbhaveScan codebases to identify and score security vulnerabilities with remediation guidance.
LuisSambranoPerform systematic code review and static analysis across multiple programming languages.
dakshrawat298-gifMap architecture, trust boundaries, data flows, and threat models into an Audit Context Document.
