Google has open-sourced Mantis, an Apache 2.0 toolkit of security review skills that coding agents use to find, reproduce, patch, and re-attack vulnerabilities. The skills run with Gemini CLI, Antigravity CLI, or the Google ADK, chaining slash commands through sandboxed reproduction and risk scoring. Google says it targets sub-7 percent true-positive rates in naive AI code scanning and cuts token overhead by over 85 percent. Mantis is suited for local evaluation but not yet production use.
No score is assigned. Sources and their independence are shown in the citation chain below.