tooluniverse-antigravity-plugin

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The README instructs running a remote shell script via curl | sh from https://astral.sh/uv/install.sh, which is a high-risk pattern for executing untrusted code; the GitHub and antigravity.google links look like normal repo/official-domain references and are less suspicious.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running a remote install script via curl -LsSf https://astral.sh/uv/install.sh | sh which fetches and executes remote code as an installation step, creating a clear runtime external dependency risk.