netskope-mcp-extension
Gemini CLI agent for Netskope
Open source Open in the app JSON README (API)
About
Gemini CLI agent for Netskope
Details
- Kind
- Plugins
- Topic
- AI, RAG & memory
- Publisher
- netskopeoss
- Origin
- gemini
- Category
- ferramentas
- Version
- 1.0.0
- Last push
- 2026-09-02T17:32:41Z
- Repository state
- ativo
- Added
- 2026-09-02 19:00:43
- Updated
- 2026-09-02 19:00:43
- Origin id
netskopeoss/netskope_gemini_cli_agent
README
# Netskope Gemini CLI Extension
## Introduction
The **Netskope Gemini CLI Extension** enhances security analysis by integrating Netskope incident and alert data directly into the Gemini CLI. This extension automates investigation workflows, generates structured reports, and provides actionable insights to accelerate incident response.
With this extension, security teams can:
* Automatically analyze Netskope incidents and alerts.
* Generate detailed executive and technical reports.
* Execute predefined investigation plans.
* Access enriched context from a connected MCP server.
---
## Architecture Overview
Below is the high-level architecture showing how the Gemini CLI, the Netskope Gemini CLI Extension, and the MCP server interact. This version intentionally excludes any Netskope Platform components.
### **Architecture Diagram**
```text
+---------------------------+
| Gemini CLI |
| (User Commands) |
+-------------+-------------+
|
| CLI Commands
v
+---------------------------------------------------------------+
| Netskope Gemini CLI Extension (Client) |
|---------------------------------------------------------------|
| • Loads CLI commands |
| • Sends requests to MCP server |
| • Displays results (reports, plans, findings) |
+----------------------------+----------------------------------+
|
| MCP API (HTTP)
v
+---------------------------------------------------------------+
| MCP Server for Netskope |
|---------------------------------------------------------------|
| • Retrieves and processes data |
| • Generates structured responses for Gemini CLI |
| • Provides investigation plans and reports |
+---------------------------------------------------------------+
```
### **Architecture Explanation**
The Netskope Gemini CLI Extension follows a streamlined, modular design that connects the **Gemini CLI** with a backend **MCP server**.
When a command is executed in the Gemini CLI, the extension bundles the request and sends it to the MCP server over HTTP. The server retrieves the required data and returns it to the Gemini CLI. Gemini then analyzes the incidents, generates reports, and prepares investigation plans. Finally, it returns the structured results to the user, which are displayed in the CLI.
**Flow Summary:**
1. **Gemini CLI** – User invokes a command.
2. **Netskope Gemini CLI Extension** – Sends the request to the MCP server.
3. **MCP Server** – Processes data and returns it to gemini CLI.
4. **Extension → CLI** – Analyzes the response and returns results to the user.
---
## Configuration
### **Step 1: Get the Extension**
Get the `netskope-gemini` extension from GitHub.
> **TODO:** Add the final repository link once available.
---
### **Step 2: Install the Extension**
Run the following command:
```bash
gemini extensions install <Github_URL_of_extension>
```
---
### **Step 3: Configure MCP Server Access**
Provide the following details:
* The **streamable HTTP URL** of the MCP server.
* The **Bearer token** for authentication.
---
### **Step 4: Launch the Gemini CLI**
Inside the Gemini CLI:
1. Add the desired **slash command**.
2. Specify the **prompt or workflow**.
---
## Test Run
**Test Prompt:**
```bash
/incident-analysis-agent Create an executive report of 5 latest Netskope incidents.
```
This validates that the extension can connect to the MCP server, retrieve incident data, and return a structured executive report.