deploy-skills-in-antigravity
Warn
Audited by Socket on May 30, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose matches the behavior, but the skill's footprint is inherently risky because it acts as a loader for other skills from arbitrary repositories and promotes them into a global shared directory. The official `skills` CLI reduces installer-provenance concerns, yet the transitive installation and broad filesystem modification make this a medium-high security risk even without clear evidence of malware.
Confidence: 90%Severity: 72%
Audit Metadata