MediaMetz/gemini-cli
1
0
Fork 0
mirror of https://github.com/google-gemini/gemini-cli.git synced 2026-07-08 17:16:48 -07:00
Code Issues Packages Projects Releases Wiki Activity

docs: weekly audit results for 24319780415

Browse Source
This commit is contained in:
github-merge-queue
2026-04-13 00:17:35 +00:00
committed by github-actions[bot]
parent 0179726222
commit 3266d7dbd8
15 changed files with 187 additions and 99 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/policy-engine.md
+30
View File
@@ -466,6 +466,36 @@ deny_message = "Deep codebase analysis is restricted for this session."
tool, use the `subagent` field instead. See
[TOML rule schema](#toml-rule-schema).
## Context-Aware Security (Conseca)
Context-Aware Security (Conseca) is an experimental feature that uses an LLM to
dynamically evaluate tool calls based on the intent of your prompt. It provides
an additional layer of protection by identifying potentially harmful actions
that might otherwise match an "allow" rule.
### How it works
When Conseca is enabled, every tool call that would be automatically allowed is
first sent to a security classifier. The classifier analyzes the tool call, its
arguments, and the original user prompt to determine if the action is safe and
aligned with the user's intent.
If the classifier identifies a potential security risk, it can override an
`allow` decision and force it to `ask_user` or `deny`.
### Enable Conseca
To enable Conseca, set the `security.enableConseca` setting to `true`.
```bash
gemini config set security.enableConseca true
```
<!-- prettier-ignore -->
> [!NOTE]
> Conseca is an experimental feature and may increase the latency of tool
> execution, as it requires an additional model call for security validation.
## Default policies
Gemini CLI ships with a set of default policies to provide a safe out-of-the-box
docs/reference/tools.md
+9 -9
View File
@@ -115,15 +115,15 @@ each tool.
### Task Tracking
| Tool | Kind | Description |
| :----------------------- | :------ | :-------------------------------------------------------------------------- |
| `tracker_add_dependency` | `Think` | Adds a dependency between two existing tasks in the tracker. |
| `tracker_create_task` | `Think` | Creates a new task in the internal tracker to monitor progress. |
| `tracker_get_task` | `Think` | Retrieves the details and current status of a specific tracked task. |
| `tracker_list_tasks` | `Think` | Lists all tasks currently being tracked. |
| `tracker_update_task` | `Think` | Updates the status or details of an existing task. |
| `tracker_visualize` | `Think` | Generates a visual representation of the current task dependency graph. |
| `update_topic` | `Think` | Updates the current topic and status to keep the user informed of progress. |
| Tool | Kind | Description |
| :----------------------------------------------------------------------- | :------ | :-------------------------------------------------------------------------- |
| [`tracker_add_dependency`](../cli/tutorials/automation.md#task-tracking) | `Think` | Adds a dependency between two existing tasks in the tracker. |
| [`tracker_create_task`](../cli/tutorials/automation.md#task-tracking) | `Think` | Creates a new task in the internal tracker to monitor progress. |
| [`tracker_get_task`](../cli/tutorials/automation.md#task-tracking) | `Think` | Retrieves the details and current status of a specific tracked task. |
| [`tracker_list_tasks`](../cli/tutorials/automation.md#task-tracking) | `Think` | Lists all tasks currently being tracked. |
| [`tracker_update_task`](../cli/tutorials/automation.md#task-tracking) | `Think` | Updates the status or details of an existing task. |
| [`tracker_visualize`](../cli/tutorials/automation.md#task-tracking) | `Think` | Generates a visual representation of the current task dependency graph. |
| [`update_topic`](../cli/tutorials/automation.md#status-reporting) | `Think` | Updates the current topic and status to keep the user informed of progress. |
### Web