Generate images using the internal Google Antigravity API (Gemini 3 Pro Image). High quality, native generation without browser automation.
Security Analysis
medium confidenceThe skill's code and instructions match its stated purpose (generating images via an internal Google Antigravity/Gemini image endpoint) and the sensitive actions (reading a local OAuth profile) are explained and necessary for that purpose, but you should still verify the source before giving it access to real credentials.
Name/description (generate images via Google Antigravity/Gemini image) align with what the code does: it calls a Google sandbox image endpoint and writes returned base64 image data to disk. The required binary (node) and the declared config path (auth.profiles) are consistent with the implementation.
SKILL.md and the script explicitly instruct the agent to read local OAuth tokens from an OpenClaw auth-profiles.json and to call the internal daily-cloudcode-pa.sandbox endpoint. Reading the auth profile is sensitive but justified by the skill's purpose; the instructions do not attempt to read unrelated files or exfiltrate data to arbitrary third-party endpoints.
No remote install or downloads are requested; there is a bundled Node script that will run. No extract/download URLs or third-party package installs are present, minimizing install-time risk.
The skill does not request environment variables but does read an OAuth access token from the local auth-profiles.json (PATH can be overridden via OPENCLAW_AUTH_PATH). That access is necessary to authenticate to the internal API, but it is a high-value credential so granting this skill access to your auth profiles should be done consciously.
The skill does not request always:true, does not modify other skills or global settings, and only writes image files to user-writable paths. It does not persist new credentials or change agent configuration.
Guidance
This skill legitimately needs to read a Google Antigravity OAuth token from your OpenClaw auth-profiles.json in order to call the internal Gemini image endpoint; that is sensitive. Before installing: 1) verify and trust the skill author/source (no homepage provided here); 2) inspect the generate.js file yourself (it is included and straightforward); 3) consider using a least-privilege or separate test account/profile rather than your main Google credentials; 4) note the default auth path (~/.openclaw/agents/main/agent/auth-profiles.json) or set OPENCLAW_AUTH_PATH to a safe profile; 5) if unsure, run the script in an isolated environment or container. If you do not want any code reading local OAuth tokens, do not install or run this skill.
Latest Release
v2.0.0
antigravity-image-gen 2.0.0 includes metadata improvements and config clarifications. - Added .clawhub/origin.json and _meta.json for improved metadata and skill provenance. - Clarified authentication requirements and security note in documentation. - Updated config requirements to include auth.profiles in metadata. - No functional changes to the image generation process.
Popular Skills
Published by @IPedrax on ClawHub
