Skip to content
DevAgentRadarDevAgentRadar
Sign in
Proposals/Audit security updates in Google Antigravity 1.1
proposalteamP5Worth a lookGoogle Antigravity

Audit security updates in Google Antigravity 1.1.9

Added slash-command and skill expansion to print mode, so a headless run such as -p "/my-skill review this diff" now resolves and applies the skill instead of sending it as literal text, with --disable-slash-commands to opt out. · Improved interactive startup so a slow or han

Why this loop

Release: Google Antigravity 1.1.9 Detail: Added slash-command and skill expansion to print mode, so a headless run such as -p "/my-skill review this diff" now resolves and applies the skill instead of sending it as literal text, with --disable-slash-commands to opt out. · Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session Themes: agent, mcp, model, security Config surfaces changed: background and headless runs, skills and plugins Developer angle: Try in a throwaway repo before changing daily workflow. Team angle: Pilot / sandbox / policy review before org rollout. Source: https://github.com/google-antigravity/antigravity-cli/releases/tag/1.1.9

Proposed actions

  1. Review the background and headless runs and skills and plugins config for Google Antigravity to verify the changes don't break your workflow.
  2. Read the release notes for Google Antigravity 1.1.9 to understand the full scope of the update.

Agent prompt

Paste into your agent or query via MCP (get_agent_prompt) — free, no extra AI cost

Google Antigravity / agent task

DevAgentRadar → Google Antigravity

Goal: turn this release signal into a safe pilot plan for my stack.

Context

Assistant: Google Antigravity Proposal: Audit security updates in Google Antigravity 1.1.9 Summary: Added slash-command and skill expansion to print mode, so a headless run such as -p "/my-skill review this diff" now resolves and applies the skill instead of sending it as literal text, with --disable-slash-commands to opt out. · Improved interactive startup so a slow or han Primary source: https://github.com/google-antigravity/antigravity-cli/releases/tag/1.1.9

Why it matters

Release: Google Antigravity 1.1.9 Detail: Added slash-command and skill expansion to print mode, so a headless run such as -p "/my-skill review this diff" now resolves and applies the skill instead of sending it as literal text, with --disable-slash-commands to opt out. · Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session Themes: agent, mcp, model, security Config surfaces changed: background and headless runs, skills and plugins Developer angle: Try in a throwaway repo before changing daily workflow. Team angle: Pilot / sandbox / policy review before org rollout. Source: https://github.com/google-antigravity/antigravity-cli/releases/tag/1.1.9

Suggested actions

  1. Review the background and headless runs and skills and plugins config for Google Antigravity to verify the changes don't break your workflow.
  2. Read the release notes for Google Antigravity 1.1.9 to understand the full scope of the update.

Config surfaces this release may change

  • background and headless runs (high confidence) — check your repo before applying
  • skills (high confidence) — check your repo before applying
  • hooks — check your repo before applying

After you finish

Do not report this as applied to DevAgentRadar. You cannot write the visitor's loop.

Tell the human: open https://devagentradar.com/proposals/google-antigravity-1-1-9-audit-security-updates-in-google-antigravity-1- and mark Applied, Skipped, or Failed. Proposal id: 4d30f713-5be2-4530-8ccd-f21651dd8697

Please:

  1. Map the change to concrete pilot steps
  2. Flag security / permission implications
  3. Keep the pilot reversible
agentmcpmodelsecurityRelease source ↗

Your loop

This browser · no sign-in · not shared as “you”

After you run the prompt

Only you can mark this. Agents cannot write your loop.

Your decision stays on this device. A public tally appears after a few votes.

Originating release signal

Google Antigravity1.1.9Jul 31, 2026

1.1.9

Added slash-command and skill expansion to print mode, so a headless run such as -p "/my-skill review this diff" now resolves and applies the skill instead of sending it as literal text, with --disable-slash-commands to opt out. · Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session while headless and one-shot runs keep blocking so their single scripted turn still sees the full toolset. · +9 more changes
Verified excerpt — the source's own words
  • Added slash-command and skill expansion to print mode, so a headless run such as -p "/my-skill review this diff" now resolves and applies the skill instead of sending it as literal text, with --disable-slash-commands to opt out.
  • Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session while headless and one-shot runs keep blocking so their single scripted turn still sees the full toolset.
  • Improved permission grants so a pattern approved at a prompt is recorded for the rest of the conversation, letting later commands that match it run without prompting again.
  • Improved the default system temporary-directory grant to cover writes as well as reads, so agents no longer trigger a permission prompt when creating or updating files there.
  • Fixed stop hooks that always block hanging the agent forever; after a configurable number of consecutive continuations, the hook can no longer block and the turn ends normally.
  • Fixed PostToolUse hooks firing on non-tool steps such as user input and model responses, which also caused them to ignore their configured matchers.

Excerpt ends here — this release continues at the source ↗.

Primary source ↗