mcp codeaudit for Gemini CLI
io.github.infoinlet-marketplace/mcp-codeaudit
Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
client:Gemini CLI
transport:stdio
runtime:npm
Install mcp codeaudit in Gemini CLI
~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json
{
"mcpServers": {
"mcp-codeaudit": {
"command": "npx",
"args": [
"-y",
"@infoinlet/mcp-codeaudit"
]
}
}
}
Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs