antigravity-cli

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned and appears to target the official Antigravity CLI, not an obvious attacker endpoint, but it delegates project data and authority to a preinstalled opaque external agent binary. That makes it a medium-risk workflow integration: coherent and likely legitimate, yet high-trust due to credential inheritance, workspace access, and external binary execution.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Sep 12, 2026, 04:09 PM
Package URL
pkg:socket/skills-sh/scarletkc%2Fagents%2Fantigravity-cli%2F@c98071ded313f4fa3278e2e1330234af051c4b8be2fe2007b79523eccb8391e2
Security Audit — socket — antigravity-cli