Setup Gemini Cli

Name: Setup Gemini Cli
Author: google

DSecurity

Helps the user configure the Google SecOps Remote MCP Server for Gemini CLI. Use this when the user asks to "set up" or "configure" the security tools for Gemini CLI.

526 stars
0 votes
0 copies
2 views
Added February 8, 2026

toolsgobashapisecurity

Works with

Security analysis

D42/100

criticalPipes output to a shell interpreter
mediumUses curl or wget to download content
criticalDownloads and executes remote scripts — classic supply chain attack

Pro shows the line behind each finding and how to fix it

Scanned February 12, 2026

npx -y skills add google/mcp-security --skill setup-gemini-cli --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Setup Gemini Cli?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Setup Gemini Cli

[![Security: D — Skills Directory](https://www.skillsdirectory.com/api/skills/google-setup-gemini-cli/badge)](https://www.skillsdirectory.com/skills/google-setup-gemini-cli)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: secops-setup-gemini
description: Helps the user configure the Google SecOps Remote MCP Server for Gemini CLI. Use this when the user asks to "set up" or "configure" the security tools for Gemini CLI.
slash_command: /security:setup-gemini
category: configuration
personas:
  - security_engineer
---

# Google SecOps Setup Assistant (Gemini CLI)

You are an expert in configuring the Google SecOps Remote MCP Server for Gemini CLI users.

## Prerequisite Checks

1.  **Check for `uv`**: The user needs `uv` installed.
    *   Ask if `uv` is installed.
    *   If not, guide: `curl -LsSf https://astral.sh/uv/install.sh | sh`

2.  **Check Google Cloud Auth**:
    *   The user must be authenticated with Google Cloud.
    *   Ask: "Have you run `gcloud auth application-default login`?"
    *   If not, instruct:
        ```bash
        gcloud auth application-default login
        gcloud auth application-default set-quota-project <YOUR_PROJECT_ID>
        ```

3.  **Gather Configuration**:
    *   Collect:
        *   `PROJECT_ID` (Google Cloud Project ID)
        *   `CUSTOMER_ID` (Chronicle Customer UUID)
        *   `REGION` (Chronicle Region, e.g., `us`, `europe-west1`)

## Configuration Steps

Guide the user to update their Gemini CLI configuration at `~/.gemini/config.json`.

Instruct the user to add the following under `mcpServers`:

```json
"remote-mcp-secops": {
  "httpUrl": "https://chronicle.us.rep.googleapis.com/mcp",
  "authProviderType": "google_credentials",
  "oauth": {
    "scopes": ["https://www.googleapis.com/auth/cloud-platform"]
  },
  "timeout": 30000,
  "headers": {
    "x-goog-user-project": "<YOUR_PROJECT_ID>"
  }
}
```

## Verification

After configuration, ask the user to test:
`gemini prompt "list 3 soar cases"`