Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/cli/agy-process.js:180
- Evidence
child = spawn(command, args, spawnOptions);
Security audit
antigravity-plugin
Security checks for vulnerabilities and agentic risk
Overview
This package is a disclosed OpenClaw plugin that bridges to a separately installed Google Antigravity CLI, with meaningful risks that are expected for that integration and mostly default-scoped.
Install only if you intentionally want OpenClaw sessions to run through your local Google Antigravity CLI. Keep `dangerouslySkipPermissions` disabled for normal use, use a scoped AGY project/workspace, avoid broad `addDirs`, and confirm your AGY account terms permit this integration before processing sensitive data.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec