@gitlab-ecosystem/gemini-cli-extension-gitlab
BMCP server package gemini-cli-extension-gitlab
Install
agr install @gitlab-ecosystem/gemini-cli-extension-gitlab --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "gemini-cli-extension-gitlab", "version": "0.1.0", "private": true, "type": "module", "license": "Apache-2.0", "description": "Gemini CLI extension that surfaces GitLab project context and tools.", "scripts": { "build": "tsc -p tsconfig.json", "clean": "rimraf dist", "test": "vitest run", "test:watch": "vitest" }, "dependencies": { "@modelcontextprotocol/sdk": "^1.15.1", "zod": "^3.23.8" }, "devDependencies": { "@iarna/toml": "^3.0.0", "@types/node": "^20.17.6", "rimraf": "^6.0.1", "typescript": "^5.6.3", "vitest": "^1.6.0" } }
Trustgrade B
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- warnLicenseno SPDX license detected
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-fcb5f9420a052026-08-03