Gemini Andy27725

Gemini CLI for one-shot Q&A, summaries, and generation.

Security Scan

The skill is internally consistent: it wraps a Gemini CLI, only requires the 'gemini' binary (installable via Homebrew), and does not ask for extra credentials or unusual filesystem access.

Purpose & Capability

Name/description (Gemini CLI for Q&A/summaries) matches the declared runtime requirement (the 'gemini' binary) and the install spec (brew formula 'gemini-cli'). No unrelated binaries or env vars are requested.

Instruction Scope

SKILL.md directs the agent to call the gemini CLI with positional prompts and documents extensions and login flow. It does not ask the agent to read arbitrary files, environment variables, or exfiltrate data beyond what the CLI itself does.

Install Mechanism

Install uses Homebrew formula 'gemini-cli' which is a common, low-friction mechanism. The SKILL.md does not specify the tap/author — verify the formula origin before installing, since brew formulas execute code on install.

Credentials

No environment variables or credentials are declared. SKILL.md mentions an interactive login if auth is required; the CLI may store tokens on the host (not declared here). This is expected but worth noting.

Persistence & Privilege

Skill is not always-enabled and is user-invocable. It does not request modifying other skills or system-wide agent settings.

Assessment

This skill appears to do what it says: it calls a local 'gemini' CLI and offers a Homebrew install. Before installing, verify the 'gemini-cli' Homebrew formula comes from a trusted source (official tap or project repository) since brew installs run arbitrary install-time code. Be aware the Gemini CLI may prompt for interactive login and persist tokens/config to your home directory — if you have sensitive data or strict environment policies, inspect the CLI's documentation or repository first. If you want extra caution, manually install/inspect the gemini binary yourself and run it once to confirm behavior before granting this skill access.

Gemini CLI

Use Gemini in one-shot mode with a positional prompt (avoid interactive mode).

Quick start

• gemini "Answer this question..."
• gemini --model <name> "Prompt..."
• gemini --output-format json "Return JSON"

Extensions

• List: gemini --list-extensions
• Manage: gemini extensions <command>

Notes

• If auth is required, run gemini once interactively and follow the login flow.
• Avoid --yolo for safety.