CodeVulnerability for Gemini CLI

io.github.evozim/codevulnerability

OWASP threat scanner auditing codebases for safety leaks.

client:Gemini CLI transport:sse

Install CodeVulnerability in Gemini CLI

~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json

{
  "mcpServers": {
    "codevulnerability": {
      "url": "https://codevulnerability-mcp.vercel.app/api/mcp"
    }
  }
}

Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs