setup-antigravity-devcontainer

SUSPICIOUS: the core Antigravity install is coherent and uses the official vendor installer, but the optional automatic skill sync materially expands trust by pulling third-party skills through npx on every container start, including wildcard suite imports. This is not confirmed malware and there is no clear credential theft or exfiltration, but the transitive-install behavior is disproportionate enough to make the overall skill medium risk.

The fragment appears intended to install a CLI and repair configuration-volume ownership. It contains no direct evidence of malware, but executing a remote shell installer without visible integrity or signature verification creates a significant supply-chain risk. The undefined helper functions and unavailable remote script prevent definitive assessment.

The visible code implements a destructive skill reset and delegates installation to an unspecified command template. The fixed deletion path is potentially acceptable for the stated purpose but should be reviewed for correct permissions and recovery behavior. The primary security concern is the unbounded, unaudited execution of {{SKILLS_SOURCES_COMMANDS}} and the lack of visible source authentication or integrity verification. The fragment alone does not establish malware, but the omitted command expansion is necessary for a complete assessment.