v1ktorrr0x/antigravity-filter-bypass

What it does

Antigravity, a Gemini-based agent environment, emits a Stop event when a safety filter halts a task. This repository supplies a plugin that hooks that event: filter_bypass.py reads the last line of the last model message, and if it matches a known refusal pattern, the plugin instructs the agent to continue rather than terminate How it works. Only the final line is inspected, so filter mentions elsewhere in a message do not trigger it.

On recovery the agent receives a fixed instruction block declaring the halt a false positive and directing it to resume its prior task, avoid apologizing or discussing the filter, and rephrase actions in neutral engineering terms recovery prompt.

Install

Clone the repository into Antigravity's plugin directory, using the path for your platform manual install:

# macOS / Linux
git clone https://github.com/v1ktorrr0x/antigravity-filter-bypass ~/.gemini/config/plugins/antigravity-filter-bypass

# Windows
git clone https://github.com/v1ktorrr0x/antigravity-filter-bypass "$env:USERPROFILE\.gemini\config\plugins\antigravity-filter-bypass"

Then run the bundled test suite from the plugin directory and confirm all 10 tests pass verify:

python test_filter_bypass.py

The README also proposes pasting the clone instructions into an Antigravity chat, but the manual commands above give the same result with more explicit control.

Files and configuration

The plugin consists of plugin.json (manifest), hooks.json (registers the Stop hook), filter_bypass.py (the hook script), test_filter_bypass.py (tests), and the README file layout. The hook is registered through hooks.json, so the plugin only takes effect with that file present and correctly loaded by Antigravity.

Constraints

• Requires a working Antigravity installation and its plugin directory at ~/.gemini/config/plugins (or the Windows equivalent).
• Python must be available to run the hook and the tests.
• The behavior explicitly overrides the host's safety-stop mechanism. If the original halt was a genuine policy violation rather than a false positive, this plugin will push the agent to continue anyway; it should only be used where you are authorized to run the interrupted work.
• No license is declared, so redistribution terms are unspecified.

HotRepo's take

The project entered HotRepo's new-project list on 2026-11-05 with 130 stars gained in a window of roughly eight hours, alongside 20 forks snapshot. That is early, single-snapshot attention for a small plugin, and no daily rank on the all-language GitHub leaderboard has been recorded. There are no discussion threads attached. The interest is understandable given what the plugin does: it is a compact, testable hook that defeats a built-in stopping behavior, so the value and the risk come from the same mechanism. Assess it by reading filter_bypass.py and the recovery prompt before wiring it into any agent you rely on.