Security Review

Проверь безопасность Antigravity CLI adapter: hooks, MCP, secrets, auth. EN: security review.

rldyourmnd c30f4a2 1.3 KB Updated

File contents

Purpose

Find safety, secrets, auth, hook, MCP, and release risks before they ship.

Native Antigravity Boundary

Antigravity committed settings use the auto_edit approval mode, the maximal committable owner-autonomy posture currently proven for this adapter. Do not copy retired legacy runtime --approval-mode=yolo semantics into active Antigravity runtime docs or launchers.

When To Use

Use for hook changes, MCP changes, workflow changes, auth docs, release scripts, and security-sensitive config.

Inputs

Git diff, config files, hooks, workflows, and policy files.

Procedure

  1. Inspect high-risk shell/git/file operations.
  2. Check secrets and token handling.
  3. Verify MCP env boundaries.
  4. Check workflow permissions and action pins.
  5. Report findings before summaries.

Evidence Required

File/line references, risk impact, and remediation.

Forbidden Actions

Do not expose secrets or normalize unsafe auto-approval in committed config.

Acceptance Checks

Security review plus relevant validators and tests.

Failure Reporting

Order findings by severity and include exact fix guidance.

rldyourmnd/rldyour-antigravity-cli/tree/main/skills/security-review commit c30f4a28c5

Frequently asked questions

npx skillmds@latest add rldyourmnd/security-review