gemini-antigravity-cli

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose is plausible, but its actual install and credential flow do not align with official Google Gemini or official Antigravity tooling. The key risk is installing an unverifiable CLI/binary from mismatched publishers and then passing GOOGLE_API_KEY and project data into it.

Confidence: 93%Severity: 90%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:47 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fgemini-antigravity-cli%2F@11a38fb8b65d8a4784b5518a2527c841f8c5020667bdfb3c4b8ae85038cd9f7d