agent-bom for Gemini CLI
io.github.msaad00/agent-bom
Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.
client:Gemini CLI
transport:stdio
runtime:pypi
Install agent-bom in Gemini CLI
~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json
{
"mcpServers": {
"agent-bom": {
"command": "uvx",
"args": [
"agent-bom"
],
"env": {
"NVD_API_KEY": "<NVD_API_KEY>"
}
}
}
}
Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs