Security review

Skill NDDev-it-com/rldyour-antigravity-cli/.gemini/skills/security-review

Проверь безопасность Antigravity CLI adapter: hooks, MCP, secrets, auth. EN: security review.From its SKILL.md

Install

npx -y skills add NDDev-it-com/rldyour-antigravity-cli --skill security-review

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.3 KB, 236 tokens by cl100k_base, as published. Nobody here has run it

Purpose

Find safety, secrets, auth, hook, MCP, and release risks before they ship.

Native Antigravity Boundary

Antigravity committed settings use the auto_edit approval mode, the maximal committable owner-autonomy posture currently proven for this adapter. Do not copy retired legacy runtime --approval-mode=yolo semantics into active Antigravity runtime docs or launchers.

When To Use

Use for hook changes, MCP changes, workflow changes, auth docs, release scripts, and security-sensitive config.

Inputs

Git diff, config files, hooks, workflows, and policy files.

Procedure

Inspect high-risk shell/git/file operations.
Check secrets and token handling.
Verify MCP env boundaries.
Check workflow permissions and action pins.
Report findings before summaries.

Evidence Required

File/line references, risk impact, and remediation.

Forbidden Actions

Do not expose secrets or normalize unsafe auto-approval in committed config.

Acceptance Checks

Security review plus relevant validators and tests.

Failure Reporting

Order findings by severity and include exact fix guidance.

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.