Antigravity and agentic IDEs: what token exposure means for teams

TL;DR: Google’s Antigravity agentic IDE exposed authentication tokens through process memory and, on macOS, a network-reachable interface that could leak user data and enable attacker interaction with the LLM backend, according to Lumia Security. The case shows that feature-rich agentic development tools shift risk toward local token exposure, delegated trust, and governance at the point of use.

Editorial analysis by NHI Mgmt Group, based on content published by Lumia Security: “The Space Race — Looking for Security Issues in Google’s Antigravity”.

Key questions

Q: How should security teams govern agentic IDEs in development environments?

A: Security teams should govern agentic IDEs like any other identity-bearing runtime, starting with inventory, privilege scope, and tool reach.

Q: Why do exposed local interfaces matter in agentic development tools?

A: A local interface can still become a credential leak if it binds too broadly or renders sensitive session data into a browser view.

Q: What are the signs that developer AI tooling is crossing a trust boundary?

A: Look for automatic content ingestion, hidden file references, remote retrieval triggered by file contents, and assistant actions that can touch secrets or outbound endpoints.

Practitioner guidance

• Harden local service binding Force internal agentic IDE services to bind to localhost only, and block any 0.0.0.0 listeners unless they are intentionally exposed and authenticated.
• Separate process identity from user identity Assign distinct credentials and logging to the IDE front end, language server, and model backend so one process cannot silently impersonate another.
• Remove secrets from web-rendered views Audit all embedded browser or webview components for session data, tokens, and user metadata that should never be rendered into HTML.

Bottom line: Agentic IDEs introduce a blended trust model where process identity, delegated authority, and model access can fail together.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →