Mantis is a modular, stack-agnostic toolkit of security review skills designed for AI coding agents to autonomously discover, reproduce, and patch vulnerabilities. It provides a sequential pipeline—ranging from architecture synthesis and threat modeling to automated vulnerability research and remediation—to enable continuous and iterative defensive security reviews in an isolated environment.
- Designed for use with various coding agent frameworks like Gemini CLI or Antigravity SDK.
- Emphasizes the need for execution within sandboxed environments (e.g., gVisor, Docker) due to the risk of AI-generated code.
- Includes a "Snapshot Model" that allows for pinned, authoritative security passes on living codebases via non-destructive synchronization.
- Features an extensive set of specialized skills including `mantis-researcher` for flaw sweeping and `mantis-patch` for automated remediation.
- Designed for use with various coding agent frameworks like Gemini CLI or Antigravity SDK.
- Emphasizes the need for execution within sandboxed environments (e.g., gVisor, Docker) due to the risk of AI-generated code.
- Includes a "Snapshot Model" that allows for pinned, authoritative security passes on living codebases via non-destructive synchronization.
- Features an extensive set of specialized skills including `mantis-researcher` for flaw sweeping and `mantis-patch` for automated remediation.
GitLab introduces CI/CD Steps, a new programming language designed for simplifying complex DevSecOps automation workflows.
