antigravity-updated

MEDIUM

maintainer allanfreitas 0 votes scanned 2026-09-12 03:12:35.601558

View on AUR

Why flagged

Installs a prebuilt Electron/Chromium binary from storage.googleapis.com under a path that appears to be a Google-branded product, but 'antigravity.google' is not a real Google domain and no such product exists; the package could be a legitimate internal/beta tool or a spoofed package masquerading as Google-official, making the prebuilt binary unverifiable despite the GCS URL.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:40 source_x86_64=(Antigravity-$pkgver-x86_64.tar.gz::https://storage.googleapis.com/antigravity-public/antigravity-hub/$pkgver-$_build/linux-x64/Antigravity.tar.gz)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 60%): Installs a prebuilt Electron/Chromium binary from storage.googleapis.com under a path that appears to be a Google-branded product, but 'antigravity.google' is not a real Google domain and no such product exists; the package could be a legitimate internal/beta tool or a spoofed package masquerading as Google-official, making the prebuilt binary unverifiable despite the GCS URL.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: allanfreitas <allanfreitas at gmail>
    
      2
    
      3pkgname=antigravity-updated
    
      4pkgver=2.13.0
    
      5pkgrel=1
    
      6pkgdesc='Google Antigravity 2.0 multi-agent orchestration platform'
    
      7arch=(aarch64 x86_64)
    
      8url=https://antigravity.google/product/antigravity-2
    
      9license=(LicenseRef-Google-Antigravity)
    
      10provides=(antigravity)
    
      11conflicts=(antigravity)
    
      12depends=(alsa-lib
    
      13         at-spi2-core
    
      14         cairo
    
      15         dbus
    
      16         expat
    
      17         glib2
    
      18         glibc
    
      19         gtk3
    
      20         libcups
    
      21         libgcc
    
      22         libx11
    
      23         libxcb
    
      24         libxcomposite
    
      25         libxdamage
    
      26         libxext
    
      27         libxfixes
    
      28         libxkbcommon
    
      29         libxrandr
    
      30         mesa
    
      31         nspr
    
      32         nss
    
      33         pango
    
      34         systemd-libs)
    
      35options=(!strip !debug)
    
      36source=(antigravity.desktop
    
      37        antigravity.png)
    
      38# ---- Update these three variables on each new release ----
    
      39_build=6362815968182272
    
      40source_x86_64=(Antigravity-$pkgver-x86_64.tar.gz::https://storage.googleapis.com/antigravity-public/antigravity-hub/$pkgver-$_build/linux-x64/Antigravity.tar.gz)
    
      41source_aarch64=(Antigravity-$pkgver-aarch64.tar.gz::https://storage.googleapis.com/antigravity-public/antigravity-hub/$pkgver-$_build/linux-arm/Antigravity.tar.gz)
    
      42b2sums=('ec2c74f0e6f2458f2ef1c67b1321c058a3f7c422e364d8871a0a933220ec52ee5736e449cb797b6f135cff1f4adfe6f81e0fdbc76d3ec67c245aea002b8577d8'
    
      43        '772849ebf4574dccc7d2fc30751baed10b4a5d4091c524f3d69938192387693501c0c54ea5b43fa2ed382f70ecdff369a4c65ce3d0f778c68712fa0c2b5e84b8')
    
      44b2sums_aarch64=('a83e260859bbd53a5eddf7bb268737946b9e3957ad793ebad24046055776ee4d1e75ba0ba33baf6c343392a3cec5ccaaff9aeae5a1c81c87d0f87457ddb29026')
    
      45b2sums_x86_64=('c3201c068eaee99636576aaa1d3680aee82b2211ece8822b2f98a7e776d0da717b6f5c5097d3b27bb4a29d23a566021a086916303b1d820f0cd7648b6f1ff162')
    
      46# ----------------------------------------------------------
    
      47
    
      48package() {
    
      49    install -d "$pkgdir/opt"
    
      50    cp -a Antigravity-*/ "$pkgdir/opt/Antigravity"
    
      51
    
      52    install -d "$pkgdir/usr/bin"
    
      53    ln -s /opt/Antigravity/antigravity "$pkgdir/usr/bin/antigravity"
    
      54
    
      55    install -d "$pkgdir/usr/share/licenses/antigravity"
    
      56    ln -s /opt/Antigravity/LICENSE.electron.txt -t "$pkgdir/usr/share/licenses/antigravity"
    
      57    ln -s /opt/Antigravity/LICENSES.chromium.html -t "$pkgdir/usr/share/licenses/antigravity"
    
      58
    
      59    install -Dm644 antigravity.desktop -t "$pkgdir/usr/share/applications"
    
      60    install -Dm644 antigravity.png -t "$pkgdir/usr/share/pixmaps"
    
      61}
    
      62

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-12 03:12:35	Medium	3
2026-09-12 03:10:21	Medium	2