antigravity-skills-manager

SUSPICIOUS. The skill is internally coherent for a skill manager, but its core capability is to install other skills via a third-party npm package and place them in active Antigravity skill directories. That transitive trust and npx-delivered code execution make it medium risk even without evidence of credential theft or stealth.