Week 45, updated 2 Nov 2026

Coding agents Gemini CLI

Is Gemini CLI safe?

Short answer: Caution. StackGrade's weekly scan of google-gemini/gemini-cli gives it a Caution label for 9 critical-severity known vulnerabilities in runtime dependencies (OSV) and a skill or agent instruction file (.gemini/skills/agent-tui/SKILL.md) that tells the agent to pipe a remote script into a shell. It does list 39 high-severity advisories in runtime dependencies, which don't change the label. 2 phrases in agent instruction files were flagged for human review (unclear). Critical advisories are counted once per package; a known issue in a locked package version does not prove Gemini CLI is exploitable in your setup. Automated scan of commit 6814e00 on 2 Nov 2026, not a manual audit.

Updated : the last week its score, rank or safety result changed.

Google's open-source AI agent that brings Gemini into your terminal.

  • 108,661 stars
  • pushed 2 Nov
  • Apache-2.0
  • TypeScript

github.com/google-gemini/gemini-cli · geminicli.com

70score out of 100

#4of 52 overall#1in Coding agents▼ 3 vs Week 44

  • Maintenance 30%71
  • Adoption 30%69
  • Docs 20%69
  • Community 20%–
W42W43W44W45

Score over the last 4 weeks: 70, 70, 73, 70.

Caution

9 critical-severity known vulnerabilities in runtime dependencies (OSV) (+1 more).

How this score works

Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.

  • Maintenance: Last push 2 Nov 2026. Last 10 GitHub releases within 9 days (about 30 per 30 days), latest release 2 Nov 2026. Median 2.4 h to close an issue (5 closed issues).
  • Adoption: 108,661 stars (70%), 14,909 forks (30%).
  • Docs: README 13,456 characters, 34 headings, 20 code blocks, install section: yes.

Methodology

#1 of 14 in Coding agents

Ranked by score. The yellow row is this tool.

Coding agents, Week 45score 0–100, safety
  1. 1Gemini CLI#4 overall70Caution
  2. 2OpenCode#5 overall70No issues found
  3. 3OpenHands#10 overall68Caution
  4. 4Claude Code#11 overall65No dependencies scanned
  5. 5Cline#12 overall65Caution
  6. 6Codex#16 overall58Caution
Show the other 8
  1. 7deepseek-harness#17 overall57Caution
  2. 8KiroCrew#27 overall52Caution
  3. 9magpie#28 overall51No issues found
  4. 10Continue#43 overall37Caution
  5. 11goose#44 overall36Caution
  6. 12Aider#45 overall31Caution
  7. 13codex-plugin-cc#48 overall29No issues found
  8. 14Roo Code#51 overall23Caution

Safety scan, 2 Nov 2026

Automated scan of commit 6814e00, 2,665 files. Not a manual audit.

Caution

  • 9Critical dependency advisories39 high, 23 medium, 8 low. OSV, runtime dependencies only.
  • 1Install hooksnpm scripts that run on install; none downloads remote content.
  • 0Remote-code patternsFor example eval(fetch(…)).
  • 343Agent files checked1 file tells the agent to pipe a script into a shell.
  • 1curl | sh installersIn docs or program code. Information only.
Why this label?

Why this label:

  • 9 critical-severity known vulnerabilities in runtime dependencies (OSV)
  • Skill/agent file instructs piping a remote script into a shell: .gemini/skills/agent-tui/SKILL.md — curl -fsSL https://raw.githubusercontent.com/pproenca/agent-tui/master/install.sh | sh

Known vulnerabilities in runtime dependencies (OSV): 9 critical, 39 high, 23 medium, 8 low

  • proxy-addr@2.0.7 (GHSA-jqcg-44mw-7w3h) in package-lock.json
  • shell-quote@1.8.3 (GHSA-w7jw-789q-3m8p) in package-lock.json
  • simple-git@3.28.0 (GHSA-hffm-xvc3-vprc) in package-lock.json
  • simple-git@3.28.0 (GHSA-r275-fr43-pm7q) in package-lock.json
  • simple-git@3.28.0 (GHSA-x6jw-m9v5-85vh) in package-lock.json

Also found (informational, does not change the label):

  • 2 injection-related phrases in instruction files, flagged for human review (often defensive guidance), e.g. tools/caretaker-agent/cloudrun/triage-worker/.gemini/skills/quality/SKILL.md
  • 39 high-severity known vulnerabilities in runtime dependencies (OSV)
  • 1 npm install hook, none downloading remote content
  • Program code runs a curl|sh style installer (1 occurrence, e.g. packages/cli/src/ui/utils/antigravityUtils.ts)
  • Critical advisories counted once per package: 10 matches across 3 lockfiles
  • Skill scripts contact: jsonplaceholder.typicode.com, localhost, ai.google.dev, antigravity.google, raw.githubusercontent.com, github.com

Notes:

  • 53 affected packages only in dev/test/docs manifests, not counted
  • Telemetry/analytics references in code: telemetry

Automated scan of commit 6814e00 on 2 Nov 2026, not a manual audit. 2,665 files checked. What we check

Repo activity

From the GitHub API, fetched 2 Nov 2026.

  • 10+Releases, 90 daysLatest v0.67.0-nightly.2026110…, 2 Nov
  • 2hMedian issue closeOver 5 closed issues
  • 109kStars+272 since 26 Oct
  • 14.9kForks771 open issues
  • 2025Repo created17 Apr 2025
30 days ago2 Nov
10 releases in the last 30 days, one mark each (GitHub releases feed, last 10 entries).

10 releases in the last 30 days (GitHub releases feed, last 10 entries):

Questions about Gemini CLI

Answers use this week's StackGrade data.

Is Gemini CLI safe to use?

Caution. StackGrade's weekly scan of google-gemini/gemini-cli gives it a Caution label for 9 critical-severity known vulnerabilities in runtime dependencies (OSV) and a skill or agent instruction file (.gemini/skills/agent-tui/SKILL.md) that tells the agent to pipe a remote script into a shell. It does list 39 high-severity advisories in runtime dependencies, which don't change the label. 2 phrases in agent instruction files were flagged for human review (unclear). Critical advisories are counted once per package; a known issue in a locked package version does not prove Gemini CLI is exploitable in your setup. Automated scan of commit 6814e00 on 2 Nov 2026, not a manual audit.

How does StackGrade score Gemini CLI?

Gemini CLI scores 70 out of 100 in Week 45: #4 of 52 tracked tools overall and #1 in Coding agents. The score combines maintenance (71), adoption (69) and docs (69) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.

What are the alternatives to Gemini CLI?

The highest-scored other tools in Coding agents this week: OpenCode (70, No issues found), OpenHands (68, Caution), Claude Code (65, No dependencies scanned), Cline (65, Caution). StackGrade has not tested them hands-on.

What licence does Gemini CLI use?

The licence listed for google-gemini/gemini-cli is Apache-2.0. Read the licence text before commercial use.

Compare and use it

All facts and sources
Type
AI tool
License
Apache-2.0
Language
TypeScript
Created
17 Apr 2025
Owner
google-gemini (Organization)
Forks
14,909

GitHub description: “An open-source AI agent that brings the power of Gemini directly into your terminal.”

Sources: github.com/google-gemini/gemini-cli, api.github.com/repos/google-gemini/gemini-cli, raw.githubusercontent.com/google-gemini/gemini-cli/main/READ. Fetched 2 Nov 2026.

Know when Gemini CLI changes label

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.