Directory / Gemini CLI
Gemini CLI
A TOML policy engine can allow, deny or ask per tool, argument pattern and MCP server. Trusted folders put unknown repos in safe mode. Sandboxing is opt-in.
Lock this down first
Enable security.folderTrust and tools.sandbox. Both are off by default.
Scorecard
| Criterion | Rating | Notes |
|---|---|---|
| Permission granularity | 3/3 | |
| Human approval gates | 2/3 | |
| Sandboxing | 2/3 | Opt-in. Default profile restricts writes to the project directory. |
| Secrets handling | 2/3 | Env var redaction with allowed and blocked lists. |
| Audit logs | 2/3 | OpenTelemetry tool_call log events, opt-in. |
| Kill switch / interrupt | 2/3 | Ctrl+C cancels the current request. |
| Network egress control | 2/3 | Proxied sandbox profiles route network through a proxy. |
Sources
- https://geminicli.com/docs/reference/policy-engine/
- https://geminicli.com/docs/cli/trusted-folders/
- https://geminicli.com/docs/cli/sandbox/
- https://geminicli.com/docs/cli/telemetry/
- https://geminicli.com/docs/reference/configuration/
- https://github.com/google-gemini/gemini-cli/blob/main/packages/cli/src/ui/constants/tips.ts