Deep Research via Gemini CLI Extension

• Analyzed: May 10, 2026, 6:40 AM
• Findings: 1
• Version: 1.1.0
• Hash: f21718e8e92ae80565c294f9c306b464737285edab90619892138e53ef31a9d4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate workflow for executing long-running 'Deep Research' tasks using the Gemini CLI and its MCP extension. It includes scripts (start-research.js, poll-research.js, save-report.js) to manage the research lifecycle and uses a background shell script (poll.sh) with nohup to handle the multi-minute processing time required by the Gemini API. While the skill performs high-privilege actions such as writing to /tmp and executing background processes, these behaviors are clearly documented, logically necessary for the stated purpose, and lack any indicators of malicious intent or data exfiltration.