github.com / roninreilly

roninreilly/antigravity-reverseproxy-api

JavaScript·65 files·commit 9ae5806·scanned 4d ago·cached ✓

40/100

SUSPICIOUS

Obfuscation or dynamic code paths detected. Intent unclear — review before running anything.

verdict accurate?

No stars or forks

No community activity

Research / educational context

CLI tool detected

threat-state: suspiciouslive

FINDINGS ░▒▓

criticalSuspicious code is reachable from an entry pointFlagged files are imported by the application's entry path: src/constants/shared.js. This means the suspicious code can execute when the app runs.+8

warningHardcoded secret/credentialAPI keys, passwords, or tokens hardcoded in source code. Should be in environment variables.src/constants/shared.js+3

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

55 files scanned @ 9ae5806 | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution8

network & exfiltration0

file system access0

obfuscation0

supply chain0

owasp / injection3

telemetry

files 55/65rules hit 2engine v7commit 9ae5806

github

roninreilly/antigravity-reverseproxy-api

A proxy server that exposes both **Anthropic-compatible** and **OpenAI-compatible** APIs backed by **Antigravity's Cloud Code**, letting you use Claude and Gemini models with **Claude Code CLI**, **OpenAI SDK**, and other compatible clients.

JavaScript

268d

65 files

55 scanned(85%)

9ae5806

architecture░▒▓

entry (2) flagged (1) pkg (7)

59 nodes · 146 edgesscroll to zoom · click node to jump to finding