deploy-skills-in-antigravity

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's stated purpose matches its behavior, but that behavior is inherently high-trust because it installs and enables other skills from arbitrary repositories, then promotes them into a global Antigravity directory. The main concern is transitive trust and supply-chain exposure, not confirmed malware or covert exfiltration.

Confidence: 91%Severity: 74%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:29 PM
Package URL
pkg:socket/skills-sh/derailed-dash%2Fdazbo-agent-skills%2Fdeploy-skills-in-antigravity%2F@55555ab786933500d75e8226d8b08892c5d28e46722f5ea73dfa218a0f8852f6
Security Audit — socket — deploy-skills-in-antigravity