Skip to content

Conversation

@dandye
Copy link
Collaborator

@dandye dandye commented Jan 13, 2026

This PR introduces a new Gemini CLI Extension for Google SecOps, providing a self-contained set of security skills for the Gemini CLI.

Features

  • Self-Contained Skills: Removes external dependencies by inlining runbook logic directly into the skill definitions.
    • Setup: Configuring the remote MCP server.
    • Triage: Alert triage protocol.
    • Investigate: Malware and Lateral Movement investigations.
    • Hunt: Proactive threat hunting procedures.
  • Documentation: Detailed guides in docs/google_secops_extension.md.
  • Zero-Dependency: No external submodules required.

This PR is targeting the remote_mcp branch to make the diff clear. We can rebase and change target to main after remote_mcp is merged into main.

@dandye dandye changed the base branch from main to remote_mcp January 13, 2026 01:07
@dandye dandye changed the title feat: Add google-secops Gemini CLI extension feat: Add google-secops Gemini CLI extension with skills Jan 13, 2026
@dandye dandye requested a review from goog-cmmartin January 13, 2026 01:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants