gemini-review
Facilitates code review using Google Gemini CLI, leveraging a 1M token context for comprehensive analysis and CI/CD integration.
Install this skill
or
81/100
Security score
The gemini-review skill was audited on Jun 8, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 231
Template literal with variable interpolation in command context
SourceSKILL.md
| 231 | ```yaml |
medium line 281
Template literal with variable interpolation in command context
SourceSKILL.md
| 281 | body: `## 🤖 Gemini Code Review\n\n${review}` |
medium line 287
Template literal with variable interpolation in command context
SourceSKILL.md
| 287 | ```yaml |
low line 111
Access to hidden dotfiles in home directory
SourceSKILL.md
| 111 | echo 'export GEMINI_API_KEY="your-api-key"' >> ~/.zshrc |
low line 352
Access to hidden dotfiles in home directory
SourceSKILL.md
| 352 | # ~/.gemini/settings.json |
low line 14
External URL reference
SourceSKILL.md
| 14 | **Sources:** [Gemini CLI](https://github.com/google-gemini/gemini-cli) | [Code Review Extension](https://github.com/gemini-cli-extensions/code-review) | [Gemini Code Assist](https://codeassist.google/ |
low line 105
External URL reference
SourceSKILL.md
| 105 | # Get API key from https://aistudio.google.com/apikey |
Scanned on Jun 8, 2026
View Security Dashboard