mantis-reproduce

Generate and execute crash reproduction scripts in isolated sandbox environments.

731|84|Updated Jun 15, 2026
One-click install
npx skills add https://github.com/google/mantis --skill mantis-reproduce
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: mantis-reproduce
Source: https://github.com/google/mantis/tree/main/mantis-reproduce
Command: npx skills add https://github.com/google/mantis --skill mantis-reproduce

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates the creation and execution of crash reproducers, allowing security engineers to verify vulnerabilities in isolated environments without risking production systems.

Core Features & Use Cases

  • Automated Reproduction: Generates and runs PoC scripts or payloads to confirm security findings.
  • Variant Hunting: Performs mandatory boundary-mutated re-attacks to ensure patches are robust and not easily bypassed.
  • Use Case: After identifying a potential buffer overflow in a C library, use this skill to generate a payload that triggers the crash within a sandboxed container, verifying the bug and testing the effectiveness of a proposed patch.

Quick Start

Use the mantis-reproduce skill to generate and execute a crash reproducer for the finding with the specified UUID in the current workspace.

Frequently Asked Questions about mantis-reproduce

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify a security vulnerability crash in an isolated sandbox environment?

Crash reproduction scripts empirically verify security vulnerabilities by triggering memory-safety and logic flaws within isolated sandbox environments. This automated process confirms findings through direct execution of targeted payloads against the vulnerable code.

How do I generate a PoC payload to reproduce a buffer overflow finding?

Generate a PoC payload to reproduce a buffer overflow by providing the finding UUID to the automated reproduction system. The skill creates and runs the script to trigger the crash within a containerized runtime, confirming the bug.

Do I need a containerized runtime to execute crash reproducers?

Yes, a containerized runtime is required. The skill requires an isolated sandbox environment and strict adherence to reachability evidence protocols to ensure accurate vulnerability confirmation without risking production systems.

How do I test if a security patch can be bypassed after fixing a vulnerability?

Test if a security patch can be bypassed by performing mandatory boundary-mutated re-attacks. This variant hunting process ensures patches are robust and verifies that memory-safety and logic flaws are not easily bypassed.

What is the best way to automate patch verification for memory-safety flaws?

The best way to automate patch verification for memory-safety flaws is by executing variant-based boundary-mutated re-attacks within an isolated sandbox. This mandatory process ensures proposed patches are robust and cannot be easily bypassed.