What changed
Google's Antigravity App 2.28.2 adds Marketplace plugins from partners including Canva, Figma, Linear, Notion, Stripe, Supabase and Vercel, plus account tabs and sign-in immediately after installation. The agent can also suggest a relevant plugin in conversation, while business and enterprise accounts do not yet get the new account and suggestion flows.
Why it matters
Antigravity can now discover and connect more third-party systems without leaving the conversation. That shortens setup but places publisher identity, OAuth scope, suggestion quality, data routing and revocation directly on the agent's execution path.
What to do
Canary one partner plugin with a synthetic account. Verify publisher and repository identity, requested OAuth scopes, tenant selection, data sent on the first tool call, disconnect and token revocation, audit records and whether the agent suggests the plugin only for relevant tasks before wider rollout.
Caveat
Google's dated changelog establishes a gradual vendor rollout, not independent plugin review or isolation. The account and suggestion flows are not yet available to business and enterprise accounts, and a Marketplace listing does not establish safe scopes, data handling or prompt-injection resistance.