{
  "markdown": "# Gemini Security Skills\n\n![Gemini Security Skills banner](assets/banner.svg)\n\nGemini Security Skills is a curated collection of `SKILL.md` capabilities for\nGemini CLI. The repository focuses on practical cyber security work, secure\nengineering, programming, reverse engineering, SOC workflows, prompt\nimprovement, and multilingual communication.\n\nRepository URL:\n\n```text\nhttps://github.com/Masriyan/gemini-security-skills\n```\n\n## What is included\n\nThis repository contains 24 skills, grouped below.\n\n### Cyber security automation (Gemini-driven)\n\n- `gemini-tool-orchestrator`: Translate natural-language intent into safe,\n  scoped pipelines of nmap, nuclei, ffuf, semgrep, trivy, and friends.\n- `ai-redteam`: Evaluate prompt injection, jailbreak, tool abuse, agent\n  hijack, and RAG poisoning on LLM and agent systems you own.\n- `threat-intel-fusion`: Collect, normalize, enrich, dedupe, and prioritize\n  IOCs and actor profiles into STIX, Sigma, YARA, and blocklists.\n- `cloud-security-automation`: AWS, Azure, GCP posture, IaC scanning, and\n  drift-and-fix workflows shipped as code, not console clicks.\n- `detection-engineering`: Author and tune Sigma, YARA, Suricata, KQL, SPL,\n  and EQL detections with ATT&CK coverage and tests.\n- `kubernetes-security`: Cluster hardening, admission control with\n  Gatekeeper/Kyverno, runtime defense, and signed-image supply chain.\n- `purple-team-automation`: Link Atomic Red Team, Caldera, and Stratus\n  emulation to detection validation and coverage scoring.\n- `osint-recon-automation`: Passive recon, asset graphing, and exposure\n  monitoring for authorized scopes only.\n- `api-security-automation`: REST, GraphQL, and gRPC assessment covering\n  OWASP API Top 10, JWT abuse, BOLA, mass assignment, and replay.\n- `forensics-triage`: DFIR across disk, memory, network, cloud, and\n  identity with defensible timelines and chain of custody.\n- `bug-bounty-workflow`: Scope-aware recon, dedupe, and high-signal\n  reporting for HackerOne, Bugcrowd, Intigriti, and YesWeHack.\n- `smart-contract-audit`: Solidity, Vyper, and Move audit with Slither,\n  Foundry, Echidna, invariants, MEV, and bridge risk.\n\n### Core security\n\n- `offensive-security`: Plan authorized offensive security assessments.\n- `exploit-development`: Analyze lab vulnerabilities and safe proof of\n  concept workflows.\n- `malware-reverse-engineering`: Triage suspicious artifacts and produce\n  defensive findings.\n- `devsecops`: Harden CI/CD, infrastructure, containers, and releases.\n- `soc-operations`: Triage alerts, hunt threats, and produce incident notes.\n- `cybersecurity-partner`: Act as a practical security reviewer and advisor.\n\n### Engineering and language\n\n- `go-programming`: Build, debug, test, and review idiomatic Go systems.\n- `python-programming`: Build, test, type, package, and maintain Python code.\n- `assembly-programming`: Read, write, explain, and debug low-level assembly.\n- `prompt-enhancement`: Improve prompts, task specs, and agent instructions.\n- `multilingual`: Translate, localize, and improve multilingual content.\n- `claude-mythos-emulation`: Create Claude-like assistant behavior specs\n  without identity claims or proprietary prompt copying.\n\n## Install into Gemini CLI\n\nInstall Gemini CLI first:\n\n```bash\nnpm install -g @google/gemini-cli\n```\n\nRecommended extension install:\n\n```bash\ngemini extensions install https://github.com/Masriyan/gemini-security-skills --consent\n```\n\nRestart Gemini CLI after installing the extension, then verify the bundled\nskills:\n\n```text\n/skills list\n```\n\nFor a direct global skills install without using extensions:\n\n```bash\ngit clone https://github.com/Masriyan/gemini-security-skills.git\ncd gemini-security-skills\nmkdir -p ~/.gemini/skills\ncp -R skills/* ~/.gemini/skills/\ngemini\n```\n\nInside Gemini CLI, verify that the skills are loaded:\n\n```text\n/skills list\n```\n\nIf Gemini CLI is already running after you copy the skills, reload them:\n\n```text\n/skills reload\n```\n\nFor project-only installation, copy the skill folders into the target project:\n\n```bash\nmkdir -p .gemini/skills\ncp -R /path/to/gemini-security-skills/skills/* .gemini/skills/\n```\n\nSome Gemini CLI versions also provide `gemini skills` terminal utilities for a\nsingle skill repository or local `.skill` package:\n\n```bash\ngemini skills install https://github.com/Masriyan/gemini-security-skills\n```\n\nFor active local development, linking avoids repeated copying:\n\n```bash\ngemini skills link ./skills/go-programming\ngemini skills link ./skills/offensive-security\ngemini skills link ./skills/malware-reverse-engineering\n```\n\nRepeat the `link` command for each skill you want to test.\n\n## Documentation\n\nRead the documentation set for installation details, usage patterns, and skill\nknowledge:\n\n- [Install](INSTALL.md)\n- [Usage](USAGE.md)\n- [Knowledge base](KNOWLEDGE_BASE.md)\n- [Comparison](COMPARISON.md)\n- [Changelog](CHANGELOG.md)\n- [Contributing](CONTRIBUTING.md)\n- [Security policy](SECURITY.md)\n- [FAQ](FAQ.md)\n- [Roadmap](ROADMAP.md)\n- [Installation guide](docs/installation.md)\n- [Skill catalog](docs/skill-catalog.md)\n- [Gemini CLI usage](docs/gemini-cli-usage.md)\n- [Security boundaries](docs/security-boundaries.md)\n- [Cybersecurity workflows](docs/cybersecurity-workflows.md)\n- [Programming workflows](docs/programming-workflows.md)\n- [Prompting and multilingual workflows](docs/prompting-and-multilingual.md)\n- [Development and maintenance](docs/development-and-maintenance.md)\n- [Troubleshooting](docs/troubleshooting.md)\n\n## Safety model\n\nThe cyber security skills are written for authorized, defensive, educational,\nand lab-scoped work. They emphasize scope confirmation, safe proof, containment,\nreporting, and remediation. They intentionally avoid unauthorized access,\nstealth, persistence, credential theft, destructive activity, and malware\nimprovement.\n\n## Repository layout\n\nEach skill is self-contained:\n\n```text\nskills/\n└── skill-name/\n    ├── SKILL.md\n    └── agents/\n        └── openai.yaml\n```\n\nThe repository also keeps root-level skill folders for direct copy workflows.\nGemini CLI extensions use the `skills/` directory. Gemini CLI primarily uses\n`SKILL.md`. The `agents/openai.yaml` files provide UI metadata for compatible\nagent environments.\n\n## Source references\n\nThe installation docs were checked against current Gemini CLI Agent Skills and\nCLI management behavior on May 9, 2026. Relevant upstream references:\n\n- Gemini CLI Agent Skills overview:\n  https://geminicli.com/docs/cli/skills/\n- Gemini CLI managing Agent Skills:\n  https://geminicli.com/docs/cli/using-agent-skills/\n- Gemini CLI extension reference:\n  https://geminicli.com/docs/extensions/reference/\n- Gemini CLI command reference:\n  https://google-gemini.github.io/gemini-cli/docs/cli/cli-reference.html\n",
  "bytes": 6742,
  "sha": "f431a28040e51ffee0abacbec8f91d02ca6d96663fca2796d065de59976e87c1",
  "repo_slug": "masriyan/gemini-security-skills",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/plg_masriyan_gemini_security_skills_5a99432a/readme"
}