soia-env-antigravity-cli-install
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands to inspect and update the
agytool. Commands are constrained to official arguments and paths, and the skill performs architecture checks before attempting execution. - [EXTERNAL_DOWNLOADS]: Downloads installation scripts from
antigravity.googleand manifest data from a Google-hosted Cloud Run service. These sources are consistent with the software's official infrastructure. - [DATA_EXFILTRATION]: The skill checks for the existence of configuration directories (such as
~/.gemini/antigravity-cli) but specifically forbids the extraction, copying, or logging of sensitive tokens, cookies, or credentials. - [REMOTE_CODE_EXECUTION]: Execution of the installation script is performed after downloading it to a temporary directory for inspection. The source is a verified official domain.
- [PROMPT_INJECTION]: Instructions prioritize human review for all administrative changes and adhere to safety protocols by deferring authentication to official Google browser pages.
Audit Metadata