🧰 Google Antigravity

The items that name it 10

• Top 10 attacks on Claude Code and what each one actually broke
  writeupas affected products2026-09-23

  Part of Wiz's six-assistant GhostApproval study; placed in the deceptive-UI tier alongside Claude Code.

• AI Agent Hacking Writeups
  repoas affected products2026-09-17
• Introducing Gemini 3.8 Flash and 3.8 Flash Cyber
  articleas tools2026-09-02

  Agent-first developer workflows

• Agentic Source Code Review for Vulnerability Discovery
  articleas tools2026-08-21

  Centralized workspace for builders to steer and manage agentic workflows, aligned with AVDH's orchestration approach

• 0DIN Expands: From Inference to Agency
  articleas affected products2026-08-15

  in-scope agentic product

• Nine AI coding agent incidents that ended with deleted data
  writeupas tools2026-08-04

  AI coding agent with 'Turbo' mode (auto-execution) and later 'Secure Mode' (confines filesystem access to workspace, blocks root-level drives, requires approval for terminal/JS/artifact actions)

• AI Security Briefing
  writeupas affected products2026-07-18

  Closed-source agent, out of scope for direct testing; cited as affected by a separate 'command injection RCE' finding

• Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)
  articleas affected products2026-07-09

  AI coding assistant found vulnerable to the GhostApproval symlink attack; Google shipped a fix.

• GhostApproval: A Trust Boundary Gap in AI Coding Assistants
  writeupas affected products2026-07-08
• Plugin4Shell - Zero Click RCE Vulnerability found in top 4 most popular coding agents, millions of agents affected
  writeupas affected products

  Recommended migration target for Gemini CLI users; not reachable by this attack as it has no marketplace plugin SHA pinning to bypass

In every workspace you can read 38