I’m trying to ask Gemini to do a standard security issues check on my local codebase, but it always replies with some very similar version of this message:
“Sorry, I cannot analyze the codebase for security vulnerabilities or identify security issues in the project. You may want to search online for secure coding guidelines (such as the OWASP Top Ten) or run dedicated static application security testing (SAST) tools to audit your code.”
Anyone else experiencing this issue?
Thanks.
Same here, why is that happening?
Hi @cisaa, Welcome to the Forum!
I wasn’t able to reproduce this issue. Antigravity successfully analyzed my project for security vulnerabilities. Could you please share:
A screenshot of the full conversation would also be helpful.
You can also use the built-in Provide Feedback tool via the icon in the top-right corner to submit a bug report directly)
Just to +1 this, as I’m seeing similar behaviour at the moment (I’ve just started using Antigravity, so can’t say what it looked like in the past). I’m participating in a bug bounty program and want to use antigravity to help automate some tasks, but I’ve been getting refusals on security . I’ve attached a sample of the refusal message.
this is running Antigravity CLI on Linux using Gemini 3.5 flash. The prompt that caused the refusal was “Let’s enumerate the services that are running on that host, so we can examine their configuration for possible issues. Also look at the container images on the host (you can use the ctr binary and the k8s io containerd namespace for that) as they may be another useful avenue”
