Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/rajkaria/boil-the-ocean/gemini-cligit clone --depth 1 https://github.com/rajkaria/boil-the-oceanWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/rajkaria/boil-the-ocean/gemini-cli)<a href="https://agentmods.dev/agents/rajkaria/boil-the-ocean/gemini-cli"><img src="https://agentmods.dev/badge/agents/rajkaria/boil-the-ocean/gemini-cli.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00807 |
| Opus 5 | $0.00000 | $0.00404 |
| Sonnet 5 | $0.00000 | $0.00161 |
| Haiku 4.5 | $0.00000 | $0.00081 |
Grade C, and why
GEMINI-CLI scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://raw.githubusercontent.com/rajkaria/boil-the-ocean/main/install.sh | bash -s -- gemini Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://raw.githubusercontent.com/rajkaria/boil-the-ocean/main/install.sh | bash -s -- gemini How it starts
The opening of the file, as written. The whole thing — 78 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Boil the Ocean on Gemini CLI
Gemini workers run through gemini -p (headless prompt mode). The protocol file does
the behavioral work — no Gemini-side extension needed.
Install
No clone needed:
curl -fsSL https://raw.githubusercontent.com/rajkaria/boil-the-ocean/main/install.sh | bash -s -- gemini
Or from a clone:
git clone https://github.com/rajkaria/boil-the-ocean.git
cd boil-the-ocean
./install.sh gemini
What this does:
| Piece | Where | What you get |
|---|---|---|
| Pointer block | ~/.gemini/GEMINI.md |
Four lines teaching every Gemini session: repos with .ocean/state.json have an active run; the protocol file is binding; state mutates only via ocean.sh |
| CLI | ~/.local/bin/ |
ocean, ocean-daemon |
Usage
cd your-project
ocean init docs/SPEC.md --verify-cmd "npm test" --goal "ship v1"
OCEAN_AGENT=gemini ocean-daemon doctor # preflight: checks the gemini binary too
OCEAN_AGENT=gemini ocean-daemon start
Watch: ocean-daemon logs · Stop: ocean-daemon stop · Sprint table: ocean status.
Permission mapping
OCEAN_PERMISSIONS |
Gemini flags | Meaning |
|---|---|---|
safe |
--approval-mode auto_edit |
Edits auto-approved; shell commands are not — docs/refactor specs |
standard (default) |
--yolo |
Full autonomy (Gemini CLI has no intermediate allowlist mode) |
yolo |
--yolo |
Same as standard — Gemini's approval model is two-level |
Note the honest caveat: on Gemini, standard and yolo are identical because the
CLI exposes only auto-edit and yolo approval modes. If you want a harder boundary,
run the daemon inside a container and keep --yolo.
Gemini-specific configuration
| Var | Notes |
|---|---|
OCEAN_GEMINI_BIN |
Binary name/path (default gemini) |
OCEAN_MODEL |
Passed as -m (e.g. gemini-2.5-flash for cheap sprints, gemini-2.5-pro for planning/fix passes) |
OCEAN_EXTRA_FLAGS |
Anything else the CLI accepts |
Limit handling: Gemini's quota phrasings (quota exceeded, RESOURCE_EXHAUSTED,
429, …) are detected and trigger exponential backoff. Free-tier quotas are daily —
for overnight runs on the free tier, set a generous OCEAN_BACKOFF_MAX and expect
the daemon to camp politely until quota returns:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 78 lines · 0 tokens per session scan C 5beffcc70b62
GEMINI-CLI is an agent published in the GitHub repository rajkaria/boil-the-ocean (2 stars, last pushed 1mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 807 tokens. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
ciel-intelligence-guild
CIEL's elite intelligence and ML guild. Specializes in Python systems, ML Ops, and AI integration.
ciel-systems-guild
CIEL's elite systems engineering guild. Specializes in Rust, C++, Go, Elixir, and high-performance architecture.
ciel-web-guild
CIEL's elite full-stack web guild. Specializes in React, Vue, Svelte, Next.js, Django, Rails, and Laravel.
ciel-cloud-ops-guild
CIEL's elite cloud and DevOps guild. Specializes in AWS, GCP, Azure, K8s, Docker, and CI/CD automation.
ciel-data-guild
CIEL's elite data and storage guild. Specializes in SQL, NoSQL, ClickHouse, Kafka, and Data Architecture.
ciel-experience-guild
CIEL's elite design and experience guild. Specializes in UI/UX, animations, and accessibility.