collaborating-with-antigravity-4c8719 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited collaborating-with-antigravity-4c8719 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
agy-bridge is a thin JSON wrapper around the Google Antigravity (agy) CLI plus an optional gemini CLI fallback. It produces stable BridgeResponse envelopes so this skill can drive Antigravity sessions deterministically.
blocking your own conversation: start a background job and poll.
Do not use for trivial one-shot questions — the round-trip overhead is not worth it. Prefer direct work for those.
# One-shot synchronous call (ask mode, no write):
python scripts/agy_bridge.py \
--cd "/path/to/project" \
--PROMPT "Explain the auth flow in src/auth/"Output is a single JSON line on stdout: {"success": true, "SESSION_ID": "…", "agent_messages": "…", "adapter": {…}, …}.
--mode controls the agent persona and downstream safety policy:
| Mode | Use it for | Worktree? | Writes? |
|---|---|---|---|
ask (default) | Q&A, code reading, design discussion | no | no |
plan | Multi-step planning, breakdown | no | no |
prototype | Generate diffs for review | optional | no |
review | Code review of staged changes | no | no |
execute | Make file edits in the workspace | yes | requires --allow-write |
browser | Interactive browsing / research | no | no |
long | Multi-hour agent loop, expect to poll status | no | no |
execute always creates a worktree by default; combine with --allow-write to opt in to mutations. The worktree default is configurable in ~/.config/agy-mcp/config.toml (see references/security.md).
Capture SESSION_ID from the first response, then pass it back:
# Turn 1
python scripts/agy_bridge.py --cd "/proj" --PROMPT "Analyse src/auth/"
# → {"SESSION_ID": "abc-123", "agent_messages": "…"}
# Turn 2 (continues the same conversation)
python scripts/agy_bridge.py --cd "/proj" --SESSION_ID abc-123 \
--PROMPT "Now propose a refactor."For tasks that exceed a single Claude turn, use the supervisor surface via the MCP tools agy_start / agy_status / agy_result / agy_read / agy_cancel. See references/usage.md for full examples.
The bridge advertises adapter capabilities in every response under "adapter". Trust those over your prior assumptions — agy does not stream tokens, so supports_streaming=false is normal; gemini does, so the fallback path returns finer-grained events.
--output-protocol claude (default) emits events shaped like Claude Code stream-json. --output-protocol codex emits OpenAI Codex exec-json. --output-protocol raw returns the canonical event envelope unchanged. Pick the one that matches your downstream parser.
SafetyPolicy.--allow-write is required for any mutation; safety policy deniesdestructive prompts even with the flag.
exit_code and timing on the JobRecord returnedby agy_status.
references/usage.md — full CLI flag reference, MCP tool surface,long-job patterns, exit codes.
references/prompt-patterns.md — proven prompt scaffolds for ask,plan, prototype, review, and execute modes.
references/security.md — threat model, secret handling, denylist,worktree behaviour, audit log layout.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.