Gemini Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gemini Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that provides access to Google's Gemini 3.5 Flash API. This server runs locally via npx for seamless integration with Claude Code.
npm installcp config.json.example config.jsonconfig.json with your Gemini API key:{
"geminiApiKey": "your-gemini-api-key-here"
}Get your API key from: https://aistudio.google.com/apikey
Run the MCP server locally:
npm run devBuild the TypeScript code:
npm run buildAdd to your ~/.claude.json MCP servers configuration:
{
"mcpServers": {
"gemini": {
"type": "stdio",
"command": "cmd",
"args": [
"/c",
"npx",
"tsx",
"C:/Users/mesol/workspace/gemini-mcp/src/index.ts"
],
"env": {}
}
}
}After adding the configuration, restart Claude Code to load the MCP server.
Query Google's Gemini 3.5 Flash API:
Parameters:
prompt (required): The prompt to send to Geminimax_tokens (optional): Maximum tokens in response (default: 8192)temperature (optional): Temperature for response generation, 0.0 to 2.0 (default: 1.0)Example Usage:
{
"name": "query_gemini",
"arguments": {
"prompt": "Explain quantum computing",
"max_tokens": 4096,
"temperature": 0.7
}
}src/index.ts: Main MCP server entry point with stdio transportsrc/config.ts: Configuration loading utilityconfig.json: API key configuration (gitignored)tsconfig.json: TypeScript configurationconfig.json is correctconfig.json exists (copy from config.json.example)For issues with:
config.json.example: Template for configurationconfig.json: Your actual config (create from example, not tracked in git).gitignore: Ensures config.json is not committedMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.