antigravity-cli-delegate
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/antigravity_delegate.pyexecutes the local binaryagy. It usessubprocess.runwith the command provided as a list of strings, which correctly prevents shell injection vulnerabilities even when processing untrusted input from prompts or stdin. - [SAFE]: The skill interacts with local files in
~/.antigravity-cli-delegateand~/.gemini/antigravity-clifor session persistence. These activities are limited to managing the vendor's own application state and do not involve unauthorized access to system secrets or network exfiltration. - [PROMPT_INJECTION]: Documentation in
SKILL.mdestablishes clear safety boundaries, instructing the agent to verify all output from the CLI and prohibiting the use of flags that would bypass security permissions.
Audit Metadata