gemini — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gemini (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Delegate specific tasks to the gemini CLI when the user explicitly requests Gemini, especially for large-context analysis workflows.
This skill provides a safe and consistent workflow to:
gemini in non-interactive mode for deterministic outputsThis skill complements existing capabilities by delegating specific tasks to Gemini when requested.
Use this skill when:
Typical trigger phrases:
Verify tool availability before delegation:
gemini --versionIf unavailable, inform the user and stop execution until Gemini CLI is installed.
references/cli-command-reference.md-p for reproducible runs.Before running Gemini:
If scope is ambiguous, ask for clarification first.
Choose the appropriate model based on task complexity:
| Model | Best For | Characteristics |
|---|---|---|
| gemini-3-flash | Quick iterations, prototyping, cost-sensitive tasks | Fast, cost-effective, great for simple tasks and quick feedback |
| gemini-3-pro | Complex reasoning, architectural design, production-quality outputs | Powerful, deeper reasoning, higher-quality output |
Selection tips:
gemini-3-flash for quick iterations and prototypinggemini-3-pro for production-quality analysis and complex reasoninggemini-3-pro for tasks where accuracy and depth are prioritized over speedgemini-3-flash for faster feedback cycles and iterate to gemini-3-pro if neededBuild a precise English prompt from the user request.
Prompt quality checklist:
Example transformation:
Preferred baseline command:
gemini -p "<english-prompt>"Supported options:
-m, --model <model-id> for model selection--approval-mode <default|auto_edit|yolo|plan>-y, --yolo as yolo shortcut-r, --resume <session-id-or-latest> to resume session--raw-output for unformatted output-o, --output-format <text|json|stream-json>Safety guidance:
--approval-mode default unless user asks otherwise--approval-mode plan for read-only analysis--yolo only with explicit user consentRun the selected command via Bash and capture stdout/stderr.
Examples:
# Default non-interactive delegation
gemini -p "Analyze this codebase architecture and list refactoring opportunities by impact."
# Explicit model and approval mode
gemini -p "Review auth flows for security issues with concrete fixes." -m gemini-3-pro --approval-mode plan
# Structured output for automation
gemini -p "Summarize key technical debt items as JSON array." --output-format json
# Resume latest session
gemini -r latest -p "Continue from previous analysis and focus on test coverage gaps."When reporting Gemini output:
Use this structure when returning delegated results:
## Gemini Delegation Result
### Task
[delegated task summary]
### Command
`gemini ...`
### Key Findings
- Finding 1
- Finding 2
### Suggested Next Actions
1. Action 1
2. Action 2
### Notes
- Output language from Gemini: English
- Requires user approval before applying code changesgemini -p "Analyze this repository for security vulnerabilities. Report only high-confidence issues with file paths, severity, and patch recommendations." -m gemini-3-flash --approval-mode plangemini -p "Read the available documentation and produce a concise architecture summary with component responsibilities and integration points." -m gemini-3-pro --approval-mode plangemini -p "Return a JSON list of top 10 refactoring opportunities with fields: title, file, impact, effort." -m gemini-3-flash --output-format jsongemini -p "Generate a minimal Express.js REST endpoint for POST /items with input validation and a unit test. Keep the implementation concise and ready to paste." -m gemini-3-flashgemini -p "Summarize this CSV file's key statistics: row count, missing-value counts, and top 5 columns by variance. Provide a 6-line bullet summary suitable for quick triage." -m gemini-3-flash --output-format json --approval-mode plangemini -p "Provide 3 short alternative microcopy options (<=20 words each) for an onboarding tooltip that explains account recovery. Include a one-line A/B test metric proposal for each option." -m gemini-3-flashgemini -p "Analyze the current system architecture and propose a detailed migration strategy to a microservices architecture. Include component boundaries, communication patterns, data ownership, and estimated risks for each migration step." -m gemini-3-pro --approval-mode plangemini -p "Perform a thorough security audit of the authentication and authorization layer. Identify potential vulnerabilities, rate-limiting gaps, token handling weaknesses, and injection vectors. Provide severity ratings and specific remediation steps for each finding." -m gemini-3-pro --approval-mode plangemini -p "Generate a production-ready TypeScript module for paginated API responses. Include input validation, error handling, retry logic with exponential backoff, and comprehensive unit tests with mocks. Follow best practices for error types, logging, and type safety." -m gemini-3-pro --approval-mode auto_editplan mode for analysis-only tasks~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.