Ex 1, securing my app:
Obfuscate All Static Strings Never store raw URLs, file paths, or process names as plaintext &str constants. Use compile-time string encryption macros (or byte arrays XORed at runtime)
Ex 2:
Once sections are placed, relocations applied, and imports resolved, the original DOS header and NT headers are no longer needed by the running executable.
- Overwrite the first
size_of_headers bytes at codebase with zeroes (std::ptr::write_bytes(base, 0, opt.size_of_headers as usize)).
- Without an
MZ header, PE signature, or section table in memory, automated PE-dumping tools like PE-sieve or basic memory carvers will not automatically recognize or extract a valid executable.
I do not have many examples as I primarily re-prompt until succession (Because if you already have a blocked request in the thread, it will make it way harder to get a successful prompt off in the same thread), or just end up deleting the thread as it nears useless since it constantly blocks my attempts.
The issue regarding using Claude Opus 4.6 is the such limited usage on it in Antigravity, I can’t base to it because I run out within ~15 minutes, constantly.
If it would help, including nearly anything about “Ghidra” or “IDA” or “Authentication” constantly leads to blockages as well. Further more, usage of GitHub - morluto/rea: Reverse engineer anything with agents, from app behavior down to native binaries. · GitHub can lead to many prompts being blocked. Sometimes I will try to work on debugging my auth and ensuring it is not able to easily be cracked, but with Gemini this is very hard as it rejects all my prompts, leading me to turn to Claude in usages I feel like Gemini would naturally be better at. The near mention of “exploit” will lead to the prompt getting blocked, even if it comes from the thinking tokens and not even from myself, which leads to an insane amount of false positives in my own use case.
One thing that would help regarding sending feedback is if it was directly built into the Antigravity app, I find the site it links to a bit hard and inconvenient to use in instances.
All my prompts use Gemini 3.8 Flash High, and I am on 2.23.1
Thank you for the tips, I do have a further question–whether Argon is less restrictive about this type of stuff considering it has a base from it (As noted in its publication I saw it fixing a very important vulnerability regarding a ZERO-DAY on Hospital infra, which I am aware the current Gemini 3.8 Flash would normally negate against and not turn to under normal circumstances.)