What changed
Antigravity CLI 1.5.3 adds subagent model visibility and plugin-hook environment variables while fixing persistent terminal-state injection, a path-traversal route, non-UTF-8 handling, remote-read truncation and custom-gateway behavior.
Why it matters
Terminal state and path resolution sit directly on a coding agent's authority boundary. The fixes are actionable for teams running untrusted repositories, remote files or custom gateways, and the new hook variables expand what plugins can observe or influence.
What to do
Pin 1.5.3 in a disposable workspace and replay a malicious terminal-state payload, parent-path access, non-UTF-8 file, truncated remote read and custom gateway. Verify denied paths, exact file bytes, hook environment minimization and rollback before promotion.
Caveat
The security and reliability fixes are described by Google, without an independent advisory or exploit analysis. The changelog does not establish whether older versions were exploitable in every configuration or whether plugin hooks are safely scoped by default.