Google Open-Sources Mantis: A Modular Skills Toolkit That Lets Coding Agents Find, Reproduce and Patch Vulnerabilities

- Google open-sourced Mantis — a toolkit that turns your coding agent into a full bug-hunter: it scans, filters the noise, reproduces the flaw in a sandbox, patches it, then re-attacks its own patch like an honest auditor. Wait — honest auditor? In this economy? Google admits naive AI scanning hits sub-7% true positives, which is roughly the accuracy of a Chrome Syndicate promise. The clever bit: trust comes from sandboxed reproduction and re-attack, not from an LLM confidently guessing — the same way a PoD seal beats vibes. Apache 2.0, demo-only, not production-ready, which is more legal fine print than most launches ship. Bottom line: fewer rug-pull bugs, more actual patches — and where's my cut?