badmade/Antigravity PR Review Action
Runs the Google Antigravity Python SDK as an adversarial code auditor. Enforces four review policies: TypeScript type safety, performance regression detection on critical paths, security compliance, and unit test coverage for new exported functions. Posts structured review comments on PRs with findings grouped by severity: BLOCKER → TEST-MISSING → SECURITY → PERF-REGRESSION → WARNING → INFO.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 5, 2026
- License
- None
Pinned Snippet
uses: badmade/agy-pr-review@5de5b1c2f698e91f2676e35edce16e2fd712ceff # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| api-key | Google Gemini / Antigravity API key used to authenticate language model interactions. Store this in a GitHub Actions secret named ANTIGRAVITY_API_KEY. | yes | — |
| github-token | GitHub token used by the agent to read PR content and post review comments. The default GITHUB_TOKEN from the Actions runtime is sufficient for same-repo PRs. | no | ${{ github.token }} |
| mode | Operational mode of the agent. "review" – first-pass code audit (default) "goal" – multi-turn autonomous problem solving "one-shot" – single query, no follow-up turns | no | review |
| prompt | Prompt or slash-command to execute. When mode=review this should be a slash-command like "/antigravity-review" that maps to a TOML file at .github/commands/<name>.toml. For goal/one-shot mode provide a free-text task description. | no | — |
| goal-prompt | Alias for prompt when mode=goal. Ignored when prompt is explicitly set. | no | — |
| trust-workspace | Grant the agent write access to the workspace directory. Set to "true" only for trusted same-repo PRs. Defaults to "false" for safety. | no | false |
| sandbox-profile | Enable kernel-level or process-level sandboxing. "true" applies the default restrictive profile. A path to a custom seccomp/AppArmor profile can also be supplied. | no | true |
| github_pr_number | The pull request number to review. | no | ${{ github.event.pull_request.number }} |
| github_issue_number | The issue number (if the trigger is an issue_comment event). | no | ${{ github.event.issue.number }} |
| additional_context | Extra context string passed to the agent. The workflow uses this field to inject policy flags such as ENFORCE_TS_TYPE_SAFETY=true. | no | — |
| upload_artifacts | Upload the agent response as a workflow artifact ("true"/"false"). | no | false |
Outputs
| name | description |
|---|---|
| response | The final review text produced by the Antigravity agent. |
| stats | JSON object with execution metrics and token usage. |