agy-second-voicelisted

# Agy Second Voice **Announce at start:** "I'm using the agy-second-voice skill to get an independent opinion from Antigravity CLI." This skill is **read-only by design**: it never passes `--dangerously-skip-permissions` to `agy`, so any tool call `agy` makes that would write/delete/execute is auto-denied by its headless mode (see "Read-only guarantee" below). It only reviews, challenges, or consults — it never fixes anything itself. For a write-capable delegate, use `bridge:opencode-bridge` instead. ## Step 0: Check the binary exists ```bash command -v agy >/dev/null 2>&1 && echo FOUND || echo NOT_FOUND ``` If `NOT_FOUND`, stop and tell the user: "Antigravity CLI (`agy`) not found. Install it and re-run this skill." ## Step 1: One-time authorization to shell out to agy This skill runs `agy` (Google's Antigravity CLI, a third-party agent) via `Bash`. Some permission configurations prompt on every such call since it looks like handing code to an external tool. Check once per project: ```bash grep -r "agy" .claude/settings.local.json .claude/settings.json 2>/dev/null ``` If no matching rule exists, ask via AskUserQuestion: - **Question**: "This skill needs to run `agy` (Google's Antigravity CLI) without a permission prompt each time. All calls are read-only — no `--dangerously-skip-permissions` is ever passed. Add a Bash allow rule to `.claude/settings.local.json`?" - If yes, merge into `.claude/settings.local.json` (creating `permissions.allow` if absent): ```json