OpenClaw Antigravity Sync Skill

Automatically discover and configure available Google Antigravity models and quotas.

This skill appears to do what it says: read your OpenClaw auth profile, call the Antigravity API, and update openclaw.json (with a backup). Before installing/running it: (1) verify the skill source (the repo/homepage is missing here) — prefer code from a trusted repository; (2) inspect the included sync.cjs (you already have) and confirm the API host (cloudcode-pa.googleapis.com) is expected for your environment; (3) back up your existing ~/.openclaw/openclaw.json (the script makes a .bak but keep your own copy); (4) run the script in a controlled context the first time (or on a copy of your config) to ensure it behaves as expected; and (5) if you have concerns about the internal-looking API path, confirm with your provider/documentation that this endpoint is appropriate for automated queries. If you want higher assurance, request provenance (repository URL or maintainer identity) before use.

Type: OpenClaw Skill Name: openclaw-antigravity-sync Version: 1.0.0 The OpenClaw Antigravity Sync skill is benign. Its `sync.cjs` script performs file system operations (reading `auth-profiles.json`, reading/writing `openclaw.json`, creating a backup) and network requests to `cloudcode-pa.googleapis.com` to fetch and update Google Antigravity model configurations. All these actions are directly aligned with the skill's stated purpose. There is no evidence of data exfiltration to unauthorized endpoints, arbitrary command execution, persistence mechanisms, or prompt injection attempts in `SKILL.md` or `README.md`. The inclusion of a WhatsApp safety check further indicates a focus on user security.