antigravity-image-gen
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill reads the local
auth-profiles.jsonconfiguration file to access OAuth tokens. This is the documented primary purpose of the skill, enabling it to authenticate requests to Google's Antigravity API. The tokens are sent to a well-known Google service domain (googleapis.com).\n- [COMMAND_EXECUTION]: The skill utilizes a Node.js script to manage the image generation workflow, including parsing user arguments, making network requests, and saving the resulting image files to the local file system. It uses standard built-in Node.js modules without external dependencies.\n- [EXTERNAL_DOWNLOADS]: The skill performs network requests to official Google API endpoints to retrieve image data. As these requests target well-known and trusted infrastructure, they do not present a security risk.
Audit Metadata