geminicli-github-action-review
Reviews and hardens GitHub Actions workflows that run Gemini CLI via google-github-actions/run-gemini-cli (dispatch/invoke/review/triage patterns) against prompt injection from untrusted issue, comment and PR text, ungated triggers, ineffective tool allowlists, subagent bypass, and over-privileged GCP/GitHub credentials. Use when auditing or writing a gemini-cli workflow, reviewing a fleet of repos that copied the run-gemini-cli templates, responding to a report that an outsider can drive a repo's Gemini agent, or after bumping the Gemini CLI version.
- Version
- 1.0.0
- License
- Apache-2.0
Pinned to revision 9666879f8285, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/geminicli-github-action-review/SKILL.md
- skills/geminicli-github-action-review/assets/dispatch-routing-test.py
- skills/geminicli-github-action-review/references/case-study.md
- skills/geminicli-github-action-review/references/threat-model-and-checklist.md
- skills/geminicli-github-action-review/references/verifying-cli-settings.md
- skills/geminicli-github-action-review/scripts/audit-gemini-workflows.py
- skills/geminicli-github-action-review/scripts/scan-run-history.sh
Every link opens the file at its source, pinned to the revision this page describes.