Gemini CLI Security Extension plugin
A Google extension for Gemini CLI that finds vulnerabilities in branch changes and checks dependencies with OSV-Scanner
- 793 ★ on the repository
- Last commit
- Apache-2.0
Extended access
Why this level
- Reads source code and sends it to Gemini models
- Runs OSV-Scanner and queries OSV.dev
Install
- Works in
Manual install
gemini extensions install https://github.com/gemini-cli-extensions/securityRequires Gemini CLI 0.4.0 or newer.
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- Reads source code and sends it to Gemini models
- Runs OSV-Scanner and queries OSV.dev
This is third-party code. Review the repository files before installing.
What it does
The extension adds a /security:analyze command to Gemini CLI that reviews changes on the current branch against origin/HEAD and produces a vulnerability report. It looks for hardcoded secrets, weak crypto, sensitive data in logs, injections, SSRF, authentication flaws and LLM risks such as prompt injection. You can narrow or widen the scope in plain language, and the report is available as JSON. The /security:scan-deps command checks dependencies against OSV.dev and suggests versions to upgrade to.
Who it is for. For developers and teams already on Gemini CLI who want a first security pass before merging.
Good fit when
- You want to check changes for common vulnerabilities before opening a pull request
- You need to find dependencies with known CVEs
- You want security checks in GitHub Actions reviews
Not a fit when
- You need a full security audit: the authors call the report a first pass
- You need /security:analyze non-interactively, which is not supported yet
Example request
/security:analyze check only the scripts folder, skip docs and config filesLimitations
Works only in Gemini CLI 0.4.0 or newer, and the analysis runs on Gemini models. The Gemini API is not reachable from Russia without a VPN. The report does not replace manual review or other scanners.
How to disable. Run gemini extensions uninstall security or disable it with gemini extensions disable.
FAQ
What is analyzed by default?
The diff between the current branch and origin/HEAD via git diff --merge-base. You can set a different scope in text after the command.
Can it run in CI?
Yes, the repo includes a run-gemini-cli example workflow that adds a security analysis step to pull request reviews.
Discussion
No questions or reviews yet.
Related
PluginsOfficial Google MCP servers for SecOps, SOAR, Threat Intelligence and Security Command Center, plus a Gemini CLI extension for alert triage
The Snyk CLI for finding vulnerabilities in code, dependencies, containers and IaC, with a built-in MCP server and agent mode
A skill for Claude Code and Codex that finds common vulnerabilities in AI-written code and shows a fix for each
A security scanner for agent skills: finds prompt injection, data exfiltration and malicious code before you install
A security scanner for AI-written code: secrets, dependencies, MCP and CI, findings investigated with evidence, and fixes you approve
Security scanner for agent skills and MCP servers: finds prompt injection, data exfiltration and supply chain risks before install
Comparison with similar tools
Entries that share the main search query, and how they differ.
| Entry | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| Gemini CLI Security Extension (this entry) | no | 793 | ||
| Defending Code Reference Harness | yes | 7,672 | anthropic's reference set for defending code | |
| Google MCP Security | yes | key is optional | 535 | official Google MCP servers for SecOps |
README in short
The README covers installation with a single gemini extensions install command and the extension's two commands: change analysis and dependency scanning. It lists the vulnerability classes, including a section on LLM application safety. There are steps for GitHub integration via run-gemini-cli and a description of a benchmark on the OpenSSF CVE dataset. Apache 2.0 licensed.