Antigravity CLI

executing-antigravity

Purpose

Use this skill to perform coding, review, research, or automation tasks with Google Antigravity CLI (agy). Antigravity is the successor to Gemini CLI for consumer workflows and has a different security model; do not translate Gemini CLI plan, auto_edit, or yolo behavior mechanically.

Antigravity represents sensitive operations as permission resources such as read_file(...), write_file(...), command(...), read_url(...), execute_url(...), mcp(...), and unsandboxed(...) and evaluates configured rules using deny > ask > allow precedence.

Capability Profiles

These profiles are repository conventions, not Antigravity-native mode names.

Implementation Workflow

1. Analyze required actions

Classify the task by the resources it requires:

• File reads only -> Tier 0.
• Workspace file modifications -> Tier 1.
• Shell commands, MCP calls, web actuation, unsandboxed execution, or other high-impact operations -> Tier 2.

Use the least capable profile that can complete the task.

2. Inspect the effective permission boundary

Antigravity permissions are configured in the user's Antigravity CLI settings. Unconfigured workspace reads/writes are normally auto-allowed; web browsing and other unconfigured sensitive actions normally fall back to Ask.

Before unattended or high-impact execution, ensure the effective policy matches the task. Remember that broader ask or deny rules can override narrower allow rules because precedence is deny > ask > allow.

3. Prefer explicit resource policies

For controlled automation, prefer narrowly scoped rules. For example:

{
  "permissions": {
    "allow": [
      "command(git status)",
      "command(git diff)",
      "command(npm run (build|lint|test))"
    ],
    "deny": [
      "command(rm -rf)",
      "command(sudo)",
      "write_file(.git/)",
      "write_file(/home/user/.ssh)"
    ]
  }
}

Treat this as an example, not a universal policy. Adapt targets to the repository, platform, package manager, and exact task.

4. Execute

Launch Antigravity CLI with:

agy

Use the TUI to submit the task. Use /permissions to inspect or manage permission rules interactively when needed.

For autonomous execution, make the requested scope explicit in the prompt: files that may change, commands that may run, validation criteria, and operations that must not occur.

5. Validate

After execution:

1. Review changed files and generated artifacts.
2. Review commands or external actions that were performed.
3. Run the minimum required validation.
4. Report unresolved risks or permission requests that were denied.
5. Do not broaden permissions unless the narrower policy demonstrably blocks required work.

Security Rules

• ALWAYS prefer narrowly scoped permission resources over global wildcards.
• ALWAYS remember permission precedence: deny > ask > allow.
• DO NOT reproduce Gemini CLI's --yolo mental model as a blanket Antigravity policy.
• DO NOT broadly allow command(*), write_file(*), mcp(*), execute_url(*), or unsandboxed(*) merely for convenience.
• KEEP destructive commands, sensitive credential paths, and privileged operations denied unless the task explicitly and legitimately requires them.
• GATE MCP mutations, browser actuation, network side effects, and unsandboxed execution according to their impact.
• REVIEW diffs and validation output before treating the task as complete.

Migration from Gemini CLI

Gemini CLI-specific concepts in the retired skill must not be carried forward mechanically:

• gemini command -> agy application
• plan / auto_edit / yolo -> task-specific Antigravity permission resources
• Gemini sandbox assumptions -> Antigravity's current permission and sandbox controls
• Gemini-specific model flags and quota guidance -> configure through current Antigravity mechanisms

Examples

Refer to references/usage-examples.md for concrete scenarios.