slopsquat scanner for Gemini CLI
io.github.4hmetuyar/slopsquat-scanner
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
client:Gemini CLI
transport:stdio
runtime:npm
Install slopsquat scanner in Gemini CLI
~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json
{
"mcpServers": {
"slopsquat-scanner": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-slopsquat-scanner"
]
}
}
}
Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs