google-antigravity-sdk

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose largely matches its agent-development guidance and Google AI Studio auth flow, but the central package name `google-antigravity` could not be verified as an official Google SDK, creating a meaningful supply-chain trust gap. No clear malicious exfiltration is present, yet the unverifiable package provenance and broad autonomous-agent scope make the skill medium risk overall.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
May 19, 2026, 08:17 PM
Package URL
pkg:socket/skills-sh/Google-Antigravity%2Fantigravity-sdk-python%2Fgoogle-antigravity-sdk%2F@974a6faa0233b7377945db368a34bdd87dc81dfc
Security Audit — socket — google-antigravity-sdk