# Endor Labs Agent Kit Antigravity CLI Plugin

<!-- Generated by Endor Labs Agent Kit. Do not hand-edit. -->

Version: `2.1.0`

This generated Antigravity CLI plugin package includes Endor Labs setup
support, Antigravity Agent Skills, and Antigravity subagents generated
from source recipes in the Endor Labs Agent Kit repository.

## Start Here

| Reader | First move |
| --- | --- |
| Human installer | Validate and install the generated Antigravity plugin directory with `antigravity plugin` commands. Then run setup: ask Antigravity CLI to use the `endor-agent-kit-setup` skill. |
| Agent installer | Preserve generated package files exactly. Do not broaden permissions, change the logo, add plugin-wide MCP, or rewrite generated agents and skills. |
| Maintainer | Change source recipes or publication code in `endor-labs-agent-kit`, regenerate with `--include-plugins`, then sync generated artifacts to `ai-plugins`. |

Content releases require a package version bump. If a host still shows old prompt content after reinstalling the same version, remove or reinstall the plugin, clear the host cache when supported, and start a fresh host session.

This package is host-specific for Antigravity CLI. Use the root README when choosing between hosts.

## Host Metadata

- Manifest: `plugin.json`.
- Skills: `skills/<agent>/SKILL.md`, including `endor-agent-kit-setup`.
- Subagents: `agents/<agent>.md`.
- Hooks: `hooks.json` plus fail-open advisory scripts for prompt routing, dependency installs, and manifest edits.
- Model/runtime: generated skills and subagents inherit Antigravity CLI defaults; the plugin does not set a plugin-wide default model.
- MCP: no plugin-wide MCP server is declared by default.

## Install From A Local Checkout

```bash
antigravity plugin validate /path/to/endor-labs-agent-kit/plugins/antigravity/endor-labs-agent-kit
antigravity plugin install /path/to/endor-labs-agent-kit/plugins/antigravity/endor-labs-agent-kit
antigravity plugin list
```

Restart Antigravity CLI after installing or reinstalling the plugin if
the newly installed skills or subagents are not visible.
If Antigravity still shows stale same-version content, uninstall and
reinstall the plugin directory, validate the package again, and start a
fresh Antigravity CLI session so host caches reload the generated prompts.

## Set Up This Machine

Ask Antigravity CLI:

```text
Use the endor-agent-kit-setup skill to check Endor Agent Kit readiness.
```

The setup skill can guide package-manager-first `endorctl` installation,
verify Endor auth and namespace readiness, and report missing `gh` or
toolchain prerequisites. It does not run scans, run `endorctl host-check`,
edit shell profiles, auto-install `gh`, or install language runtimes and
package managers.

## Capabilities And Skills

| Job | Antigravity skill | Antigravity subagent | Safety |
| --- | --- | --- | --- |
| Triage AI SAST findings | `ai-sast-triage` | `@ai-sast-triage` | mutating, approval-gated |
| Assess CI/CD and supply chain posture | `cicd-posture` | `@cicd-posture` | read-only |
| Dependency Decision Helper | `dependency-decision-helper` | `@dependency-decision-helper` | read-only |
| Diagnose Endor setup and scan issues | `endor-troubleshooter` | `@endor-troubleshooter` | read-only |
| Browse existing Endor findings | `findings-browser` | `@findings-browser` | read-only |
| Malware Response | `malware-response` | `@malware-response` | read-only |
| Package Risk Summary | `package-risk-summary` | `@package-risk-summary` | read-only |
| Assess GitHub onboarding gaps | `probe-droid` | `@probe-droid` | read-only |
| Remediation Planner | `remediation-planner` | `@remediation-planner` | read-only |
| Repository Dependency Reviewer | `repository-dependency-reviewer` | `@repository-dependency-reviewer` | read-only |
| Find safe SCA remediation paths | `sca-remediation` | `@sca-remediation` | mutating, approval-gated |
| Upgrade Impact Analysis | `upgrade-impact-analysis` | `@upgrade-impact-analysis` | read-only |
| Vulnerability Explainer | `vulnerability-explainer` | `@vulnerability-explainer` | read-only |

Mutating workflows keep file edits, branch pushes, PR/MR creation,
comments, approval verification, and Endor policy writes behind separate
approval gates. Setup never performs those workflow actions.

## Boundaries And Rules

- Always run readiness and namespace checks before live Endor lookups.
- Invoke workflow subagents as `@agent-name`, for example `@sca-remediation`.
- Do not narrate tool-planning chatter; return the workflow result, evidence, and precise gaps.
- Include `evidence_queries` and non-empty `data_gaps` whenever required Endor evidence is missing.
- Always keep setup, file edits, branch pushes, PR/MR creation, comments, tickets, and policy writes as separate evidence-backed steps.
- Never run setup scans or `endorctl host-check`.
- Never auto-install `gh`, language runtimes, or package managers.
- Never print, persist, or copy Endor API key, secret, token, or full config values.

## Provider Docs

- https://antigravity.google/docs/cli-plugins
- https://antigravity.google/docs/hooks
- https://antigravity.google/docs/gcli-migration
- https://developers.googleblog.com/an-important-update-transitioning-gemini-cli-to-antigravity-cli/