OpenGemini CLI

• Analyzed: Mar 31, 2026, 2:01 AM
• Findings: 1
• Version: 1.0.1
• Hash: de66b5ce2d097f6b63e286266419babe633583eef67649352b825f5c5ab409e5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a wrapper for the local Gemini CLI but contains critical shell injection vulnerabilities in its helper scripts. Specifically, `scripts/gemini_review.sh` and `scripts/gemini_json.sh` expand variables containing potentially untrusted file content or prompts directly within double-quoted strings in an `exec` call. This allows for arbitrary command execution (RCE) if the input contains shell metacharacters such as backticks or command substitutions. While `SKILL.md` includes safety guidelines for the agent, the underlying script implementations are fundamentally insecure.