registry / ask-antigravity-mcp / 0.4.1

ask-antigravity-mcp@0.4.1

Moved to @ask-llm/antigravity-mcp. The ask-antigravity-mcp executable name is unchanged.

EXPERIMENTAL MCP server for Google's Antigravity CLI (agy) — subscription-backed second opinions

AI Security Review

scanned 22h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

MCP client calls `ask-antigravity` or `ping`.

Impact

The external AI CLI may access supplied workspace context and its local transcripts; behavior depends on that separately installed CLI.

Mechanism

Spawn external `agy` CLI with permission skipping and optional transcript fallback.

Rationale

Source inspection found no lifecycle execution, exfiltration endpoint, persistence, or destructive package behavior. The automatic permission-bypass flag and transcript reads warrant a warning for dangerous delegated capability, not a block.

Evidence

package.jsondist/tools-CzbF89zF.jsdist/antigravityExecutor-oukh_5bP.jsREADME.md~/.gemini/antigravity-cli/cache/last_conversations.json~/.gemini/antigravity-cli/brain/<conversation>/.system_generated/logs/transcript_full.jsonl

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence with false-positive risk.

ask-antigravity-mcp@0.4.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code