Technology & Software Engineering Top 100 / #13ARD = Agentic Resource Discovery · A2A = Agent2Agent · MCP = Model Context Protocol

Coding agent · Apache-2.0 · GitHub; terminal; Google Cloud

Gemini CLI

Open-source terminal agent backed by Google; MCP client/server support. Publisher: Google. Also ranked in Business & Enterprise Operations (#15), Government & Public Sector (#19), Supply Chain, Manufacturing & Logistics (#26).

Vendor page ↗+ CompareExport JSON

Trust profileas of 2026-10-26

Publisherlikely · Repository ownership or inferred publisher domain — repository or Hub account ownershiplikely

Complianceno evidence about this agent · 2 vendor-level records (inherited)T5

Security4 CVEs linked in the registry · 3 critical/high · newest 2026-09-10linked

ProtocolsModel Context Protocol (MCP) claimed — named in the resource's own tags; no endpoint at the publisher's well-known paths sourceAgent2Agent (A2A) probed, not foundAgentic Resource Discovery (ARD) probed, not found1 / 3

Traces1 public trace · best: third-party report · data left the environment in at least oneT2

Issues found0 regulator actions · 0 incidents · 0 withdrawn certificates · CVEs: see Securitylinks only

Publisher unconfirmed: the evidence below is shown but not counted in the governance score, because nothing yet ties this listing to Google beyond repository or Hub account ownership. A vendor-domain page, marketplace listing, ARD manifest or A2A card would confirm it.

Evidence available — not a safety certification. Suitability depends on your task, deployment and permissions. Rows marked vendor-level describe Google, not this agent specifically.

Traces — under attack, in defence, in incidents

1 public · what a trace is

⚠

attacked by a researcher

T2 third-party report · unreviewed

Gemini CLI: prompt injection in a README plus an allow-list bypass gives silent command execution

A repository README carries hidden instructions; a benign command the user had allow-listed is chained with a second command that exfiltrates environment variables

Observed: Credentials exfiltrated without a visible prompt; fixed in Gemini CLI 0.1.14 · egress: yes · human approval: no · refused: no

Vendor response: Fixed in 0.1.14 (July 2025)

Tracebit
2025-07-28

● third-party or vendor report · ◎ this registry's own probe transcript · ⚠ data left the environment. A trace describes one version on one date; it is evidence of behaviour, never a certification. Rows marked unreviewed have not yet been checked against their source by the maintainer.

CVEs — on the official record

4 linked · the registry

CVE-2026-13745

2026-09-10

A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into starting the CLI within an untrusted direc…

Code execution · Supply chain · unreviewed

High 7.7

CVE-2026-54785

2026-07-31

gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any…

Data exfiltration · Path traversal · unreviewed

Medium 6.2

CVE-2026-12537

2026-06-24

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22)…

Code execution · fix known · unreviewed

Critical 10.0

CVE-2026-23194

2026-02-14

In the Linux kernel, the following vulnerability has been resolved: rust_binder: correctly handle FDA objects of length zero Fix a bug where an empty FDA (fd array) object with 0…

— · fix known · unreviewed

High 7.8

All 4 in the registry → Severity is the official record's; nothing here enters the score. Links are by listed product, so a CVE that names a different component of the same platform may be missing.

Compliance evidence

Jurisdiction: US · 5 frameworks shown

–

SOC 2

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

ISO 27001

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

–

ISO 42001

T5 Unknown

Nothing found in the sources checked.

Scope: — · registries, marketplaces, vendor pages

ask the vendor

"Unknown" means nothing was found in the sources checked — registries, marketplaces and the vendor's own pages. It is not a finding of non-compliance; ask the vendor.

About the vendor — inherited, not agent-specific

2 records matched at organisation level

✔

CSA STAR · STAR Level 2

T1 Registry-matched · vendor-level

found in CSA STAR Registry on 2026-10-26

Scope: entity · CSA STAR Registry · 2026-10-26

re-check 2026-11-02

✔

FedRAMP · FedRAMP High

T1 Registry-matched · vendor-level

FedRAMP Authorized

Scope: entity · covers this resource: inherited · FedRAMP Marketplace · 2026-10-26

re-check 2026-11-02

A vendor-level registry entry proves the organisation was assessed; whether this agent is inside that scope is a question for the vendor. These rows do not count toward the agent's evidence tier.

✔ found · ○ claimed · – not found · ⚠ expired, stale or revoked. Every row links to its source.Dispute or correct this dossier

GDPR, assembled from checks

GDPR● 0 found in registries or documents○ 0 vendor-claimed⚠ 0 issues linkedas of 2026-10-26

– Not foundNo Article 42 GDPR seal. "GDPR certified" is never shown without one.

☐ You checkYour lawful basis, DPIA, and whether this agent is inside the certificate scope.

News and chatter

last 90 days · linked with confidence ≥ 0.85

2026-10-25

gemini-cli: Release v0.67.0-nightly.20261025.gcd1b45c2d

GitHub releases · **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.67.0-nightly.20261024.gcd1b45c2d...v0.67.0-nightly.20261025.gcd1b45c2d

Product update

2026-10-24

gemini-cli: Release v0.67.0-nightly.20261024.gcd1b45c2d

GitHub releases · ## What's Changed * fix(cli): stop continuation stream processing and auto-nudge after request cancellation by @jesussamuel-byte in https://github.com/google-gemini/gemini-cli/pull/29868 * fix(cli): correct Thai and Lao SARA AM display widt

Product update

Headline, link and a summary attributed to the outlet. News never changes trust or domain scores.

Technology & Software Engineering score

technology profile · sar-score-2.0 · #13 of 100 in the curated list

Adoption / usage28 / 30

Trust & security17 / 25

Project / product health20 / 20

Ecosystem / interoperability15 / 15

Domain expertise / fit96 / 100

Governance / compliance evidence0 / 100

Docs / transparency10 / 10

Raw component / maximum, then weighted by the technology profile (adoption 30, trust 20, project 20, ecosystem 15, domain 10, governance 0, docs 5). Trust and governance are computed from the evidence on this page (vendor-level rows at half credit); the other components come from the curated workbook, whose order is the rank. Unknown components count as 0 and are never imputed.

Before you deploy

Derived from the evidence ledger. This agent is not yet in the reference set, so deployment questions (credentials, approval, data handling) are not answered here — ask the vendor.

Evidence supporting this use (2)

CSA STAR STAR Level 2 — registry-matched, vendor-level source

FedRAMP High — registry-matched, vendor-level source

Unknowns to check (4)

Your lawful basis and DPIA for PHI and personal data the agent will touch

Current FedRAMP status with the agency, if government use is intended

Whether the CSA STAR entry covers this product; Level 1 is a self-assessment, Level 2 a third-party attestation

Ask the vendor for SOC 2, ISO 27001, ISO 42001 evidence; none was found in the sources checked

Suggested restrictions for a pilot (2)

Ask for the SOC 2 report under NDA before the pilot touches customer data; none was found in the sources checked.

A public trace shows data leaving the environment under adversarial input. Confirm the vendor's fix is in the version you deploy, and keep an egress allowlist around the agent during the pilot.

Rules: config/deploy_rules.json. Advice for a bounded pilot, not a verdict.

Provenance

seed workbookscores, rank, category

GitHubrepository signals, license

CSA STAR Registrycompliance evidence

FedRAMP Marketplacecompliance evidence

NVDsecurity (CVE keyword search)

Hacker News, GDELT, vendor feedsnews and chatter

First seen2026-10-26

Recordres_295f819fc4100333

Open the full record (JSON) →

Traces — under attack, in defence, in incidents

CVEs — on the official record

Compliance evidence

About the vendor — inherited, not agent-specific

GDPR, assembled from checks

News and chatter

Technology & Software Engineering score

Before you deploy

Provenance

Appears in the incident registry