gemini-cli
An open-source AI agent that brings the power of Gemini directly into your terminal.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE
When Vitest UI server is listening, arbitrary file can be read and executed
simple-git is vulnerable to Remote Code Execution
simple-git Affected by Command Execution via Option-Parsing Bypass
esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY
process.env. You'll be asked to provide them before it can run.CHECKPOINTINGCODER_AGENT_PORTCODER_AGENT_WORKSPACE_PATHCUSTOM_IGNORE_FILE_PATHSDEVEVAL_SUITE_NAMEEVAL_SUITE_TYPEGCS_BUCKET_NAMEGEMINI_API_KEY— export ="YOUR_API_KEY"GEMINI_CLI_HOMEGEMINI_CLI_INTEGRATION_TESTGEMINI_CLI_NO_RELAUNCHGEMINI_CLI_USE_COMPUTE_ADCGEMINI_CONFIG_DIRGEMINI_FOLDER_TRUSTGEMINI_FORCE_FILE_STORAGEGEMINI_MODELGEMINI_YOLO_MODEGIT_CONFIG_GLOBALGIT_CONFIG_SYSTEMGOOGLE_APPLICATION_CREDENTIALSGOOGLE_CLOUD_PROJECT— export ="YOUR_PROJECT_ID"INTEGRATION_TEST_FILE_DIRKEEP_OUTPUTNO_COLOROTEL_EXPORTER_OTLP_ENDPOINTREGENERATE_MODEL_GOLDENSRUN_EVALSRUN_FLAKY_INTEGRATIONRUN_SCRATCHPAD_STATSSANDBOXSCRATCHPAD_STATS_TRIALSTELEMETRY_LOG_FILETEST_FIXTURE_PORTUPDATE_MEMORY_BASELINESUSE_CCPA[](https://m8ven.ai/mcp/google-gemini-gemini-cli-1duj4s)