setup-antigravity-devcontainer

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the official Antigravity CLI installation script from a Google-owned domain (https://antigravity.google/cli/install.sh).
  • [COMMAND_EXECUTION]: Executes shell scripts to patch devcontainer configuration files, including post-create.sh and post-start.sh, to automate tool installation and service starts.
  • [PERSISTENCE]: Appends a shell alias (agy-yolo) to the user's ~/.bashrc file and modifies devcontainer lifecycle scripts to maintain configuration across container rebuilds.
  • [DYNAMIC_EXECUTION]: Renders shell commands from templates at runtime to synchronize AI agent skills from external repositories using npx.
  • [COMMAND_EXECUTION]: Performs a targeted deletion of the cached skills directory (/home/vscode/.gemini/antigravity/skills/*) during the container startup sequence to facilitate a clean synchronization from upstream sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 08:22 AM