tooluniverse-antigravity-plugin

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill contains a command to install the uv package manager via curl -LsSf https://astral.sh/uv/install.sh | sh. This follows the official installation method for a widely-used and well-known development tool.
  • [COMMAND_EXECUTION]: Includes instructions for setting up the plugin using the agy CLI and cloning the repository from the author's GitHub organization (mims-harvard). These operations are necessary for the skill's primary function of plugin installation.
  • [CREDENTIALS_UNSAFE]: Mentions the use of API keys (such as NCBI_API_KEY) and guides the user on how to securely store them in configuration files or environment variables. It does not contain any hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 04:02 PM
Security Audit — agent-trust-hub — tooluniverse-antigravity-plugin