antigravity-maintainer-batch-release
What this skill does
Repository maintenance, PR merge batches, canonical sync, and release automation for AAS (possibly an internal or proprietary system).
github/sickn33 - Code Execution - 43.8k stars
Threat analysis
Skill info
pkg:github/sickn33/agentic-awesome-skills@11c9e67?skill=antigravity-maintainer-batch-releaseAssessments (2)
Code Execution
Code Execution via local-llm-review
SKILL.md
The skill's description and usage instructions suggest it may execute commands like `npm run merge:batch`, `release:prepare`, and `release:publish`, which could be used to perform actions on the reposPrivilege Escalation
Privilege Escalation via local-llm-review
SKILL.md
The skill instructs users to 'never commit or push directly to main,' implying that it may have elevated privileges or control over the repository's main branch, which could be exploited if the skill Badge
Add the Anomity scan badge for antigravity-maintainer-batch-release to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of antigravity-maintainer-batch-release? Report an issue or request a rescan.
