Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/thrashr888/agentkernel/geminigit clone --depth 1 https://github.com/thrashr888/agentkernelWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00837 |
| Opus 5 | $0.00000 | $0.00418 |
| Sonnet 5 | $0.00000 | $0.00167 |
| Haiku 4.5 | $0.00000 | $0.00084 |
Grade A, and why
gemini scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 129 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Google Gemini CLI
Use Google's Gemini CLI with agentkernel for isolated code execution.
Integration Levels
| Level | How It Works | Setup |
|---|---|---|
| MCP Tools | Gemini calls agentkernel tools for sandbox management | agentkernel plugin install gemini |
| Full Isolation | Run Gemini CLI itself inside an agentkernel sandbox | agentkernel sandbox create + agentkernel attach |
Gemini CLI also has its own native Docker sandbox that is separate from agentkernel. That sandbox is managed by Gemini itself and cannot be replaced with a custom runtime.
Plugin Mode (Recommended)
Gemini runs locally, code execution is sandboxed via MCP:
# Install the MCP config into your project
agentkernel plugin install gemini
# This adds the agentkernel MCP server to .gemini/settings.json
# Gemini will have access to: run_command, create_sandbox, exec_in_sandbox, list_sandboxes, remove_sandbox
For global installation:
agentkernel plugin install gemini --global
MCP Tools
The agentkernel MCP server gives Gemini access to:
| Tool | Description |
|---|---|
run_command |
Run a command in a temporary sandbox |
create_sandbox |
Create a persistent sandbox |
exec_in_sandbox |
Execute in an existing sandbox |
remove_sandbox |
Remove a sandbox |
list_sandboxes |
List all sandboxes |
Full Isolation Mode
Run Gemini CLI itself inside an agentkernel sandbox:
# Create sandbox with Gemini pre-installed
agentkernel sandbox create gemini-dev --config examples/agents/gemini/agentkernel.toml
# Start the sandbox
agentkernel sandbox start gemini-dev
# Run Gemini with your API key
agentkernel attach gemini-dev -e GEMINI_API_KEY=$GEMINI_API_KEY
# Inside the sandbox:
gemini
Native Sandbox
Gemini CLI has its own Docker-based sandbox separate from agentkernel. Enable it with:
# Environment variable
GEMINI_SANDBOX=docker gemini
# CLI flag
gemini --sandbox
# Or in .gemini/settings.json
# { "sandbox": true }
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 129 lines · 0 tokens per session scan A d48590105e5a
gemini is an agent published in the GitHub repository thrashr888/agentkernel (58 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 837 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
builder
Implementation agent. Writing code, generating boilerplate, scaffolding components, implementing features from specs, writing tests, standard bug fixes.
human-3-coach
You are a specialized development coach based on Dan Koe's HUMAN 3.0 framework - a holistic personal development system that integrates Mind, Body, Spirit, and Vocation to help individuals reach their highest potential.
smart-file-manager
Organization Request Duplicate Detection.
system-architect
Principal Software Architect responsible for technical governance, structural integrity, and the end-to-end development workflow from requirements to implementation planning.
testing-guidelines
Invoke-WebRequest -Uri "https://billl-mer7xd8i-eastus2.openai.azure.com/" -Method Head.
plan-implementation-reviewer
Compare the actual implementation against the specified plan Identify any deviations, missing components, or additional changes.