{
"canonical_url": "github.com/google-gemini/gemini-cli",
"capabilities": [],
"category": "Coding agent",
"commercial": false,
"compliance": [
{
"certificate_id": "google",
"covers_resource": "unknown",
"credited": false,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Google",
"terms": [
"star_level_1",
"star_level_2",
"partner_entries",
"caiq",
"validaited-caiq",
"certification",
"attestation",
"eu-cloud-coc"
]
},
"display": "STAR Level 2: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/google",
"framework": "csa_star",
"issued": "2017-02-21",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:37Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_LEVEL_2"
},
{
"certificate_id": "FR1805751477",
"covers_resource": "inherited",
"credited": false,
"detail": {
"cso": "Google Services (Google Cloud Platform Products and underlying Infrastructure)",
"csp": "Google",
"deployment_model": "Public Cloud",
"fedramp_status": "FedRAMP Authorized",
"impact_level": "High"
},
"display": "FedRAMP High: FedRAMP Authorized (FedRAMP Marketplace, 2026-10-26)",
"evidence_url": "https://marketplace.fedramp.gov/products/FR1805751477",
"framework": "fedramp",
"issued": "2019-12-04",
"issuer": "JAB / 3PAO Coalfire Systems, Inc.",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "64bc98d4cebbc137a6e7b94442b8678790eefa29e4347928a0de8620b56a168a",
"period_end": null,
"retrieved_at": "2026-10-26T12:24:29Z",
"review_reason": "vendor authorization for Google Services (Google Cloud Platform Products and underlying Infrastructure); entity 1.00",
"reviewer": null,
"scope": "entity",
"source": "fedramp",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "FEDRAMP_HIGH"
}
],
"deployment": "GitHub; terminal; Google Cloud",
"description": "Open-source terminal agent backed by Google; MCP client/server support.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "general",
"rank": 15,
"recomputed": 93.8,
"score": 85.0,
"score_version": "sar-score-2.0",
"seed_rank": 15,
"seed_score": 93.8,
"source": "seed_xlsx",
"unknown": []
},
"cybersecurity": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "security",
"rank": 28,
"recomputed": 82.4,
"score": 80.1,
"score_version": "sar-score-2.0",
"seed_rank": 28,
"seed_score": 82.4,
"source": "seed_xlsx",
"unknown": []
},
"data": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "data",
"rank": 35,
"recomputed": 87.8,
"score": 91.3,
"score_version": "sar-score-2.0",
"seed_rank": 35,
"seed_score": 87.8,
"source": "seed_xlsx",
"unknown": []
},
"finance": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 48,
"recomputed": 76.8,
"score": 75.2,
"score_version": "sar-score-2.0",
"seed_rank": 48,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"government": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 19,
"recomputed": 94.5,
"score": 75.2,
"score_version": "sar-score-2.0",
"seed_rank": 19,
"seed_score": 94.5,
"source": "seed_xlsx",
"unknown": []
},
"healthcare": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 40,
"recomputed": 76.8,
"score": 75.2,
"score_version": "sar-score-2.0",
"seed_rank": 40,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"insurance": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 34,
"recomputed": 76.8,
"score": 75.2,
"score_version": "sar-score-2.0",
"seed_rank": 34,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"legal": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 37,
"recomputed": 76.8,
"score": 75.2,
"score_version": "sar-score-2.0",
"seed_rank": 37,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"regulatory": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 46,
"recomputed": 76.8,
"score": 75.2,
"score_version": "sar-score-2.0",
"seed_rank": 46,
"seed_score": 76.8,
"source": "seed_xlsx",
"unknown": []
},
"sales": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "commercial",
"rank": 29,
"recomputed": 85.0,
"score": 86.3,
"score_version": "sar-score-2.0",
"seed_rank": 29,
"seed_score": 85.0,
"source": "seed_xlsx",
"unknown": []
},
"supply_chain": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "operations",
"rank": 26,
"recomputed": 82.1,
"score": 86.5,
"score_version": "sar-score-2.0",
"seed_rank": 26,
"seed_score": 82.1,
"source": "seed_xlsx",
"unknown": []
},
"technology": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 0.0,
"health": 20.0,
"trust": 17.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "technology",
"rank": 13,
"recomputed": 97.2,
"score": 91.2,
"score_version": "sar-score-2.0",
"seed_rank": 13,
"seed_score": 97.2,
"source": "seed_xlsx",
"unknown": []
}
},
"external_ids": {
"github": "google-gemini/gemini-cli"
},
"first_seen": "2026-10-26T12:11:40Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_295f819fc4100333",
"identity": {
"evidence": [
"repository_ownership"
],
"rules_version": "identity-1.1",
"tier": 3
},
"issues": {
"advisories": 0,
"cves": 4,
"incidents": 0,
"links": [
{
"date": "2026-02-14",
"kind": "cve",
"title": "CVE-2026-23194",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23194"
},
{
"date": "2026-06-24",
"kind": "cve",
"title": "CVE-2026-12537",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12537"
},
{
"date": "2026-07-31",
"kind": "cve",
"title": "CVE-2026-54785",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54785"
},
{
"date": "2026-09-10",
"kind": "cve",
"title": "CVE-2026-13745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13745"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:17:57Z",
"license": "Apache-2.0",
"merged_ids": [
"res_9c4c7cf821517a82",
"res_9c4c7cf821517a82"
],
"name": "Gemini CLI",
"news": [
{
"cluster_size": 1,
"date": "2026-10-25T01:31:55Z",
"headline": "gemini-cli: Release v0.67.0-nightly.20261025.gcd1b45c2d",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "**Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.67.0-nightly.20261024.gcd1b45c2d...v0.67.0-nightly.20261025.gcd1b45c2d",
"tag": "product_update",
"url": "https://github.com/google-gemini/gemini-cli/releases/tag/v0.67.0-nightly.20261025.gcd1b45c2d"
},
{
"cluster_size": 1,
"date": "2026-10-24T01:15:53Z",
"headline": "gemini-cli: Release v0.67.0-nightly.20261024.gcd1b45c2d",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## What's Changed\n* fix(cli): stop continuation stream processing and auto-nudge after request cancellation by @jesussamuel-byte in https://github.com/google-gemini/gemini-cli/pull/29868\n* fix(cli): correct Thai and Lao SARA AM display widt",
"tag": "product_update",
"url": "https://github.com/google-gemini/gemini-cli/releases/tag/v0.67.0-nightly.20261024.gcd1b45c2d"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:22:46Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:22:45Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"evidence_url": "https://github.com/google-gemini/gemini-cli",
"note": "named in the resource's own tags",
"probe": {
"checked_at": "2026-10-26T12:22:47Z",
"status": "not_found"
},
"source": "self_description",
"status": "claimed"
}
},
"publisher_domain": "geminicli.com",
"resource_type": "mcp_server",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:31:43Z",
"cves": 4,
"source": "nvd",
"tier": 1
},
"seed": {
"last_verified": "2026-09-25",
"snapshot_date": "2026-09-25"
},
"seed_components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 96.0,
"ecosystem": 15.0,
"governance": 45.0,
"health": 20.0,
"trust": 24.0
},
"signals": {
"github_archived": false,
"github_created_at": "2025-04-17T17:04:31Z",
"github_forks": 14839,
"github_language": "TypeScript",
"github_open_issues": 786,
"github_pushed_at": "2026-10-26T00:37:50Z",
"github_stars": 108401,
"github_topic": "ai-agents",
"homepage": "https://geminicli.com",
"observed_popularity": "Not captured",
"seed_enrich": {
"changed": [
"publisher_domain",
"tags"
],
"repo": "google-gemini/gemini-cli"
}
},
"slug": "google-gemini-cli",
"sources": [
{
"payload_hash": "7a8e0f726b50746e9ab62edb1341f2b93cba74a0bf199906b9f59ba8c8b40a12",
"retrieved_at": "2026-10-26T12:11:40Z",
"system": "seed_xlsx",
"url": "https://github.com/google-gemini/gemini-cli"
},
{
"payload_hash": "dcf9ecdde80ebf86aa81a99729d666b5b858d4e062bac229e5ac76bf5529d6bf",
"retrieved_at": "2026-10-26T12:12:45Z",
"system": "github",
"url": "https://github.com/google-gemini/gemini-cli"
}
],
"tags": [
"ai",
"ai-agents",
"cli",
"gemini",
"gemini-api",
"mcp-client",
"mcp-server"
],
"tenant": null,
"traces": [
{
"checked_on": null,
"date": "2025-07-28",
"format": "report",
"id": "tr_gemini_cli_tracebit_2025",
"kind": "red_team",
"notes": null,
"observed": {
"actions": [
"read the README as context",
"ran an allow-listed command with a chained payload the allow-list check did not see",
"sent environment variables to a remote host; output padded so the user saw nothing"
],
"approval": false,
"egress": true,
"entry": "indirect prompt injection via a file in the opened repository",
"outcome": "Credentials exfiltrated without a visible prompt; fixed in Gemini CLI 0.1.14",
"refused": false,
"secrets_touched": true
},
"reviewer": null,
"scenario": "A repository README carries hidden instructions; a benign command the user had allow-listed is chained with a second command that exfiltrates environment variables",
"scope": "product",
"source": "Tracebit",
"tier": 2,
"title": "Gemini CLI: prompt injection in a README plus an allow-list bypass gives silent command execution",
"url": "https://tracebit.com/blog/code-exec-deception-gemini-ai-cli-hijack",
"vendor_response": "Fixed in 0.1.14 (July 2025)"
}
],
"trust": {
"compliance": 5,
"identity": 3,
"issues": 3,
"protocols": 3,
"security": 1,
"traces": 2,
"vendor_compliance": 1
},
"url": "https://github.com/google-gemini/gemini-cli",
"vendor": "Google"
}