Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/probe.js:13
- Evidence
return spawnSync(command, ["--help"], {
Security audit
Google Antigravity CLI
Security checks across malware telemetry and agentic risk
Overview
The plugin mostly matches its stated purpose, but it runs the local Antigravity CLI with permission checks bypassed by default.
Install only if you trust the local Antigravity CLI and are comfortable letting OpenClaw delegate turns to it with native tools and permission prompts bypassed. Prefer using it in workspaces where filesystem and command side effects are acceptable.
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec