Security review

Skill NDDev-it-com/rldyour-antigravity-cli/.gemini/skills/security-review

rldyour Antigravity CLI configuration: native extensions, GEMINI.md context, commands, skills, subagents, hooks, MCP, browser-provider routing, Serena memory, and runtime validation.

Install

npx -y skills add NDDev-it-com/rldyour-antigravity-cli --skill security-review

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Проверь безопасность Antigravity CLI adapter: hooks, MCP, secrets, auth. EN: security review.

SKILL.md

1.3 KB, as published. Nobody here has run it

Purpose

Find safety, secrets, auth, hook, MCP, and release risks before they ship.

Native Antigravity Boundary

Antigravity committed settings use the auto_edit approval mode, the maximal committable owner-autonomy posture currently proven for this adapter. Do not copy retired legacy runtime --approval-mode=yolo semantics into active Antigravity runtime docs or launchers.

When To Use

Use for hook changes, MCP changes, workflow changes, auth docs, release scripts, and security-sensitive config.

Inputs

Git diff, config files, hooks, workflows, and policy files.

Procedure

Inspect high-risk shell/git/file operations.
Check secrets and token handling.
Verify MCP env boundaries.
Check workflow permissions and action pins.
Report findings before summaries.

Evidence Required

File/line references, risk impact, and remediation.

Forbidden Actions

Do not expose secrets or normalize unsafe auto-approval in committed config.

Acceptance Checks

Security review plus relevant validators and tests.

Failure Reporting

Order findings by severity and include exact fix guidance.