10 actions in 10 pieces of software · ranked by words, meaning and measured trust · 696 ms

1. 1mantis-planverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-plan

     Formulates a targeted defensive security reviewing plan based on the active threat model and historical learnings. Use when starting a security review campaign to map the codebase boundaries and generate a roadmap (workspace/plan.json). Don't use for executing code reviews, writing test scripts, or

2. 2mantis-researcherverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-researcher

     Audits production source code files based on the strategy in workspace/plan.json. Use when a review plan exists and you need to perform static analysis and deep-dive reviews of targeted files. Don't use for planning, deduplicating, or writing patches.

3. 3mantis-summarizeverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-summarize

     Pre-processes the repository by generating security-focused summaries (mantis-summary.md) for each directory to make planning and research more efficient. Use when starting a review campaign to map the codebase before threat modeling and planning. Don't use for executing code reviews, writing test s

4. 4mantis-structural-indexverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-structural-index

     Builds a content-addressed semantic-unit index from source code for structural context. Use when a pinned or live codebase is available and structural cross-reference data would improve research quality. Don't use for findings analysis, patching, or reporting.

5. 5mantis-adviseverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-advise

     Proactive security advisor and architectural remediation assistant for secure code development. Use to query threat models, historical vulnerability lineages, verified patch patterns, triaged false positives, and learned trajectory invariants before code edits or to generate architectural remediatio

6. 6mantis-reviewverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-review

     Independently reviews findings and filters out false positives. Use when consolidated findings need validation against the actual source code. Don't use for reproducing crashes or patching code.

7. 7mantis-reproduceverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-reproduce

     Generates and runs crash reproducers to verify security flaws. Use when viable findings exist and you need to write and execute a script or payload to verify the crash. Don't use for code auditing or patching.

8. 8mantis-chainverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-chain

     Analyzes individual security findings to identify and construct complex exploit chains. Use after validation stages to see if multiple low-severity bugs can be combined into a higher impact vulnerability. Don't use for initial codebase auditing or writing patch code.

9. 9mantis-reportverified and signedpassport

   skillgoogle/mantisrecord

   • mantis-report

     Generates a human-readable security review packet compiled from confirmed findings and exploit chains. Use at the end of a review cycle to produce stakeholder-facing documentation. Don't use for auditing code or verifying patches directly.

10. 10mantis-reflectverified and signedpassport

    skillgoogle/mantisrecord

    • mantis-reflect

      Extracts learnings from execution trajectories at the end of a Mantis loop. Use to parse agent conversations, extract successes, failures, and false assumptions, and append them to workspace/learnings.jsonl. Don't use for analyzing source code or writing patches.