MCP stdio ShellGuard for Gemini CLI
io.studiomeyer/stdio-shellguard
Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.
client:Gemini CLI
transport:stdio
runtime:npm
Install MCP stdio ShellGuard in Gemini CLI
~/.gemini/settings.json · windows: %USERPROFILE%\.gemini\settings.json
{
"mcpServers": {
"stdio-shellguard": {
"command": "npx",
"args": [
"-y",
"mcp-stdio-shellguard"
]
}
}
}Gemini expands $VAR and ${VAR} inside env values, so a secret can live in your shell rather than this file. Gemini CLI docs