Repo brief: google-gemini/gemini-cli

Generated by RepoPilot · document generated 2026-09-18 · concise human review Evidence snapshot · analyzed 2026-09-18T15:29:26.065Z · commit 6a466a7e2fe2

Verdict

Healthy — Strong maintenance signals

• Last commit today
• 17 active contributors
• Distributed ownership (top contributor 21% of recent commits)
• Apache-2.0 licensed
• 2 more receipts on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

What it is

Gemini CLI is a terminal-based AI agent that brings Google's Gemini models directly into the command line, providing developers with lightweight access to advanced reasoning (Gemini 3), built-in tools (Google Search, file operations, shell commands), and extensibility via Model Context Protocol (MCP). It solves the problem of integrating powerful generative AI capabilities into developer workflows without leaving the terminal. Monorepo structure with packages/a2a-server/ containing the core agent execution engine (task, executor, command registry, config management) and packages/cli/ housing the CLI interface layer (ACP protocol, session management, RPC dispatch). The a2a-server…

Start here

Open these first:

• packages/a2a-server/src/agent/executor.ts — Core agent task execution engine that orchestrates AI model calls and tool invocations; central to the agent loop.
• packages/a2a-server/src/http/app.ts — HTTP server application setup and middleware configuration; entry point for API requests.
• packages/cli/src/acp/acpSession.ts — ACP protocol session management; handles communication lifecycle between CLI and server.
• packages/a2a-server/src/commands/command-registry.ts — Registry pattern for available commands; defines extension and capability boundaries.
• packages/cli/src/acp/acpRpcDispatcher.ts — RPC dispatch mechanism translating CLI requests into server-side command execution.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

Clone with git clone https://github.com/google-gemini/gemini-cli.git && cd gemini-cli. Based on the TypeScript/JavaScript codebase and npm package presence, use npm install to install dependencies (verify with `npm…

Daily commands:

Inferred from the package structure: run npm install in the monorepo root, then examine packages/a2a-server/src/index.ts and packages/cli/ entry points. The npm scripts in each package likely define start, `de…

…shortened for this brief.

Key cautions & unknowns

• Scorecard: default branch unprotected (0/10)
• Security considerations are not trivial: rce_vulnerability.test.ts and workspace_trust.test.ts indicate the system must guard against code execution vulnerabilities and untrusted config/extension loads. The HTTP server…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.