Skills from GitHub:sickn33/antigravity-awesome-skills

This skill appears to be mostly documentation, with no executable code to analyze. It describes how to automate workflows.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

Because the skill is mostly documentation, there are few opportunities for automated analysis to find problems. The skill is labeled as trusted.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

Specialized workflow for building WooCommerce stores including setup, payment gateway integration, shipping configuration, custom product types, store optimization, and WordPress 7.0 enhancements.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is primarily documentation, which limits the potential for security issues.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

Specialized workflow for creating custom WordPress themes from scratch, including modern block editor (Gutenberg) support, template hierarchy, responsive design, and WordPress 7.0 enhancements.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is mostly documentation, which limits the potential for security issues.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

Specialized workflow for creating WordPress plugins with proper architecture, hooks system, admin interfaces, REST API endpoints, and security practices. Now includes WordPress 7.0 features for modern plugin development.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is primarily documentation, so there are no apparent risks.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

WordPress 7.0 (April 2026) introduces new features that create additional attack surfaces:

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Use Caution

Current public label: Use Caution

Because the skill references secrets and external endpoints, it is labeled "use_caution". This means you should carefully review the documentation and understand how the skill handles sensitive information.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 3 low

Comprehensive WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security. This bundle orchestrates skills for building production-ready WordPress sites and applications.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is mostly documentation, so there are no security concerns.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill uses Wireshark to analyze network traffic. It appears to be mostly documentation.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Use Caution

Current public label: Use Caution

The skill's documentation references credentials and shell commands, which is why it is labeled with caution.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 medium, 2 low

This skill provides documentation and best practices for running commands on Windows using PowerShell and CMD.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is primarily documentation, so there are no immediate security concerns.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill provides documentation about Windows privilege escalation techniques, including system enumeration, credential harvesting, and service exploitation.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

Because the skill is mostly documentation, and it mentions secrets, the automated label is 'trusted'.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 2 low

This skill packages wiki Markdown files into a VitePress static site, including a dark theme and interactive diagrams.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

Because the skill is mostly documentation, there are few opportunities for automated analysis to find problems.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill appears to be mostly documentation. It does not contain any executable code.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is just documentation, so there is nothing to verify or cause concern.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill appears to be mostly documentation. It provides information about the skill's purpose and usage.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is labeled as trusted because it is mostly documentation and does not contain any executable code.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill generates technical documentation pages. It appears to be mostly documentation.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

Because the skill is mostly documentation, there are few opportunities for automated analysis to find problems. The low-severity finding is not a security concern.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill generates onboarding documents to help engineers understand a codebase.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill's structure is primarily documentation, which limits the automated analysis that can be performed.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill generates changelogs from git history, likely for a wiki. It appears to be mostly documentation.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is mostly documentation, and no security-relevant behavior was found.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill creates wiki documentation and onboarding guides from codebases. It appears to be mostly documentation.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is mostly documentation, which limits the automated analysis that can be done. However, no security issues were found.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill integrates with the WhatsApp Business Cloud API to send messages, use templates, and automate customer service.

Source: Workspace import

Originally ingested from a local workspace copy.

Runtime evidence: OpenClaw disconnected runtime validation completed cleanly in the isolated runner.

Used fake placeholder env vars in the sandbox; no real credentials were exposed.

• OpenClaw is available in the runner image as OpenClaw 2026.3.24 (cff6dc9).
• The skill matched the basic OpenClaw-oriented layout checks used for disconnected validation.
• SKILL.md does not explicitly mention OpenClaw; this may still be valid, but intent is less obvious.
• No safe documented OpenClaw commands or package-script help probes were found; disconnected validation remains mostly structural.

Automated result: High Risk

Current public label: High Risk

The current label should account for both the file-level review and the fact that the sandbox runtime pass did not come back perfectly clean.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 2 low, 1 info

This skill automates WhatsApp Business operations using Composio's WhatsApp toolkit via Rube MCP. It appears to be mostly documentation.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is mostly documentation, and the low-severity findings do not raise any immediate concerns.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 2 low

This skill integrates with WellAlly digital health data sources and the WellAlly knowledge base.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Use Caution

Current public label: Use Caution

Because the skill references secrets and external endpoints, use caution when deploying it.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 3 low

This skill analyzes weight loss data, calculates metabolic rates, and tracks energy deficits.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is labeled as trusted because it is primarily documentation and does not contain any concerning behavior.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 1 low

This skill automates Webflow operations like CMS collection management and site publishing using Composio's Webflow toolkit.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is mostly documentation, and the low-severity findings do not suggest any immediate security concerns.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 2 low

This skill tests web applications using Python Playwright scripts.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill passed automated analysis with no security concerns.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: No findings

This skill provides documentation on testing smart contracts using Hardhat and Foundry.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Use Caution

Current public label: Use Caution

Because the skill references credentials and external endpoints, and is mostly documentation, it is labeled with caution.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 3 low

This web security testing workflow helps you test web applications against common vulnerabilities like injection attacks and broken authentication.

Source: Workspace import

Originally ingested from a local workspace copy.

Automated result: Trusted

Current public label: Trusted

The skill is labeled as trusted because the only findings are low-severity documentation issues and a mention of secrets.

Human review: none yet

The current public label is still relying on automation. A human has not weighed in yet.

Severity mix: 2 low