Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/777genius/universal-agent-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/777genius/universal-agent-plugins/gemini-extension-package)<a href="https://agentmods.dev/plugins/777genius/universal-agent-plugins/gemini-extension-package"><img src="https://agentmods.dev/badge/plugins/777genius/universal-agent-plugins/gemini-extension-package/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/777genius/universal-agent-plugins/gemini-extension-package"><img src="https://agentmods.dev/badge/plugins/777genius/universal-agent-plugins/gemini-extension-package.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade C, and why
gemini-extension-package scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
"run_shell_command(rm -rf)" What it actually says
{
"contextFileName": "GEMINI.md",
"description": "Reference Gemini CLI extension package",
"excludeTools": [
"run_shell_command(rm -rf)"
],
"mcpServers": {
"linear": {
"headers": {
"Authorization": "Bearer ${LINEAR_API_KEY}"
},
"url": "https://mcp.linear.app/mcp"
},
"playwright": {
"args": [
"-y",
"@playwright/[email protected]"
],
"command": "npx"
},
"supabase": {
"headers": {
"Authorization": "Bearer ${SUPABASE_ACCESS_TOKEN}"
},
"url": "https://mcp.supabase.com/mcp?project_ref=${SUPABASE_PROJECT_REF}"
}
},
"name": "gemini-extension-package",
"plan": {
"directory": ".gemini/plans",
"retentionDays": 7
},
"settings": [
{
"description": "Deployment profile used by local extension lifecycle checks.",
"envVar": "RELEASE_PROFILE",
"name": "release-profile",
"sensitive": false
}
],
"themes": [
{
"background": {
"diff": {
"added": "#edf7ed",
"removed": "#fdecec"
},
"primary": "#fff9f2"
},
"name": "release-dawn",
"status": {
"error": "#b42318",
"success": "#18794e",
"warning": "#9a6700"
},
"text": {
"accent": "#b3571f",
"link": "#8f4d1f",
"primary": "#2e1f14",
"secondary": "#6f5a4a"
},
"ui": {
"active": "#b3571f",
"comment": "#6f5a4a",
"focus": "#18794e",
"gradient": [
"#b3571f",
"#d99058",
"#f3c48b"
]
}
}
],
"version": "0.1.0",
"x_galleryTopic": "gemini-cli-extension"
}
What ships with it
21 files beside gemini-extension.json in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- AGENTS.md 878 B
- CLAUDE.md 407 B
- commands/deploy.toml 206 B
- contexts/RELEASE.md 120 B
- GEMINI.md 109 B
- GENERATED.md 768 B
- hooks/hooks.json 18 B
- plugin/mcp/servers.yaml 894 B
- plugin/plugin.yaml 136 B
- plugin/README.md 2.0 KB
- plugin/targets/gemini/commands/release/deploy.toml 206 B
- plugin/targets/gemini/contexts/GEMINI.md 109 B
- plugin/targets/gemini/contexts/RELEASE.md 120 B
- plugin/targets/gemini/hooks/hooks.json 18 B
- plugin/targets/gemini/manifest.extra.json 87 B
- plugin/targets/gemini/package.yaml 110 B
- plugin/targets/gemini/policies/release-review.toml 142 B
- plugin/targets/gemini/settings/release-profile.yaml 144 B
- plugin/targets/gemini/themes/release-dawn.yaml 387 B
- policies/release-review.toml 142 B
- README.md 530 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 77 lines scan C 5890991b943f
gemini-extension-package is a plugin published in the GitHub repository 777genius/universal-agent-plugins (14 stars, last pushed today), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.
Other plugins, from other repositories
database-cloud-optimization
Database query optimization, cloud cost optimization, and scalability improvements.
deployment-strategies
Deployment patterns, rollback automation, and infrastructure templates.
porkbun
Manage the domains you own at Porkbun from Claude: DNS, nameservers, forwarding, DNSSEC, restore points and Secure Static Hosting, including publishing a site Claude builds for you.
transformation
Digital maturity assessment, Now/Next/Later transformation roadmaps, target operating model design, technology strategy briefs, and transformation business cases.
humanizer
Rewrite AI-sounding text so it reads like the writer without changing what it says.
nextjs
Official Next.js skills: adopt and optimize Cache Components, adopt Partial Prefetching, and verify runtime behavior against a running dev server.