registry / antigravity-rtl / 1.0.8

antigravity-rtl@1.0.8

A smart RTL (Right-to-Left) patcher with UI settings for the Antigravity application.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs antigravity-rtl, typically with elevated permissions.

Impact

Modifies a foreign AI application's code, enables DevTools, and creates a user-home RTL settings file.

Mechanism

ASAR extraction, main-process payload injection, and repacking.

Rationale

This is not concrete malware because it has no lifecycle trigger, network activity, or credential/data theft. It is a user-invoked, privileged patcher that rewrites an AI application's code and therefore warrants a warning.

Evidence

package.jsonbin/index.jsbin/payload.jsREADME.mdbin/Vazirmatn-Variable.woff2app.asarapp.asar.bakapp-extracted-rtl-temp~/.antigravity-rtl.json

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.

antigravity-rtl@1.0.8

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code