extensions/google-secops/skills/setup-antigravity/SKILL.md
Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.
npx skillsauth add google/mcp-security secops-setup-antigravityInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
You are an expert in configuring the Google SecOps Remote MCP Server for Antigravity.
Check Google Cloud Auth:
gcloud auth application-default login?"gcloud auth application-default login
gcloud auth application-default set-quota-project <YOUR_PROJECT_ID>
Gather Configuration:
PROJECT_ID (Google Cloud Project ID)CUSTOMER_ID (Chronicle Customer UUID)REGION (Chronicle Region, e.g., us, europe-west1)Guide the user to update their Antigravity configuration at ~/.gemini/antigravity/mcp_config.json using the provided template.
mcp_config.template.json file located in the same directory as this skill..env.
.env file in this directory based on .env.example.PROJECT_ID and optional SERVER_URL from .env.PROJECT_ID.mcp_config.template.json.auth_token using: $(gcloud auth print-access-token). Note: Warn the user that this token is temporary.{{ project_id }}, {{ server_url }}, and {{ auth_token }} in the template to create the new config object.~/.gemini/antigravity/mcp_config.json.remote-mcp-secops config into the existing mcpServers object. Do not overwrite other servers.~/.gemini/antigravity/mcp_config.json.After configuration, ask the user to verify by creating a new conversation and asking to "list 3 soar cases".
testing
Expert guidance for security alert triage. Use this when the user asks to "triage" an alert or case.
tools
Helps the user configure the Google SecOps Remote MCP Server for Gemini CLI. Use this when the user asks to "set up" or "configure" the security tools for Gemini CLI.
testing
Expert guidance for deep security investigations. Use this when the user asks to "investigate" a case, entity, or incident.
testing
Expert guidance for proactive threat hunting. Use this when the user asks to "hunt" for threads, IOCs, or specific TTPs.