Skip to content
DevAgentRadarDevAgentRadar
Sign in
Proposals/Audit security updates in Google Antigravity 1.1
proposalteamP5High impactGoogle Antigravity

Audit security updates in Google Antigravity 1.1.9

Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out. · Improved interactive startup so a slow or han

Why this loop

Release: Google Antigravity 1.1.9 Detail: Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out. · Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session Themes: agent, mcp, model, security Config surfaces changed: background and headless runs, skills and plugins Developer angle: Try in a throwaway repo before changing daily workflow. Team angle: Pilot / sandbox / policy review before org rollout. Source: https://github.com/google-antigravity/antigravity-cli/releases/tag/1.1.9

Proposed actions

  1. Check your background and headless runs for Google Antigravity — the release states: “Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out.”
  2. Check your skills and plugins for Google Antigravity — the release states: “Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out.”
  3. Confirm the rest of your Google Antigravity config still behaves as you expect, then decide adopt / pilot / wait.
  4. Run a 30-minute bake-off of Google Antigravity's new/default model on one real task you already know well.
  5. Re-check agent/tool permissions for Google Antigravity on a throwaway repo before using it on production code.
  6. List permission, sandbox, API, or config breaks for Google Antigravity and decide adopt / pilot / wait.

Action pack

Paste into your agent or query via MCP (`get_action_pack`) — free, no extra AI cost

Google Antigravity / agent task

# DevAgentRadar → Google Antigravity

Goal: turn this release signal into a safe pilot plan for my stack.

## Context
Assistant: Google Antigravity
Proposal: Audit security updates in Google Antigravity 1.1.9
Summary: Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out. · Improved interactive startup so a slow or han
Primary source: https://github.com/google-antigravity/antigravity-cli/releases/tag/1.1.9

## Why it matters
Release: Google Antigravity 1.1.9
Detail: Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out. · Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session
Themes: agent, mcp, model, security
Config surfaces changed: background and headless runs, skills and plugins
Developer angle: Try in a throwaway repo before changing daily workflow.
Team angle: Pilot / sandbox / policy review before org rollout.
Source: https://github.com/google-antigravity/antigravity-cli/releases/tag/1.1.9

## Suggested actions
1. Check your background and headless runs for Google Antigravity — the release states: “Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out.”
2. Check your skills and plugins for Google Antigravity — the release states: “Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out.”
3. Confirm the rest of your Google Antigravity config still behaves as you expect, then decide adopt / pilot / wait.
4. Run a 30-minute bake-off of Google Antigravity's new/default model on one real task you already know well.
5. Re-check agent/tool permissions for Google Antigravity on a throwaway repo before using it on production code.
6. List permission, sandbox, API, or config breaks for Google Antigravity and decide adopt / pilot / wait.

## Config surfaces this release may change
- background and headless runs **(high confidence)** — check your repo before applying
- skills **(high confidence)** — check your repo before applying
- hooks — check your repo before applying


Please:
1. Map the change to concrete pilot steps
2. Flag security / permission implications
3. Keep the pilot reversible
agentmcpmodelsecurityRelease source ↗

Your loop

This browser · no sign-in · not shared as “you”

Community signal · 0 approved · 0 deferred · 0 ignored

Anonymous public tally (one vote per visitor; changing choice updates your vote). Not moderated product truth.

Originating release signal

Google Antigravity1.1.9Jul 31, 2026

1.1.9

Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out. · Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session while headless and one-shot runs keep blocking so their single scripted turn still sees the full toolset. · +9 more changes

Verified excerpt — the source's own words
- Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out.
- Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session while headless and one-shot runs keep blocking so their single scripted turn still sees the full toolset.
- Improved permission grants so a pattern approved at a prompt is recorded for the rest of the conversation, letting later commands that match it run without prompting again.
- Improved the default system temporary-directory grant to cover writes as well as reads, so agents no longer trigger a permission prompt when creating or updating files there.
- Fixed stop hooks that always block hanging the agent forever; after a configurable number of consecutive continuations, the hook can no longer block and the turn ends normally.
- Fixed `PostToolUse` hooks firing on non-tool steps such as user input and model responses, which also caused them to ignore their configured matchers.

Excerpt ends here — this release continues at the source ↗.

Primary source ↗