# Everything for Gemini CLI What installs into Gemini CLI: skills, MCP servers and plugins. Each card has an install command and example prompts. 17648 cards · page 118 of 442 - HTML: https://affpapa.org/en/nevibecode/for/gemini-cli?page=118 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [http2-specific-attacks](https://affpapa.org/en/nevibecode/skills/http2-specific-attacks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A skill for assessing HTTP/2-specific attack paths such as h2c, pseudo-headers, HPACK, and multiplexing. - [clickjacking](https://affpapa.org/en/nevibecode/skills/clickjacking.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A clickjacking playbook: find out whether a page can be framed and whether an invisible overlay can trigger a sensitive action. - [jndi-injection](https://affpapa.org/en/nevibecode/skills/jndi-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for JNDI injection: lookup abuse over RMI and LDAP, JDK version limits, and post-8u191 bypasses. - [active-directory-acl-abuse](https://affpapa.org/en/nevibecode/skills/active-directory-acl-abuse.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for abusing misconfigured Active Directory permissions: dangerous ACEs, DCSync, shadow credentials, LAPS and BloodHound paths. - [csv-formula-injection](https://affpapa.org/en/nevibecode/skills/csv-formula-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A skill for testing how CSV exports and spreadsheets handle formulas coming from user fields. - [expression-language-injection](https://affpapa.org/en/nevibecode/skills/expression-language-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — An Expression Language injection attack playbook for Java frameworks. - [dependency-confusion](https://affpapa.org/en/nevibecode/skills/dependency-confusion.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Reviews dependency-confusion risk in manifests and CI. - [subdomain-takeover](https://affpapa.org/en/nevibecode/skills/subdomain-takeover.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for finding dangling CNAME, NS and MX records and claiming the resources behind them. - [http-host-header-attacks](https://affpapa.org/en/nevibecode/skills/http-host-header-attacks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Playbook for HTTP Host header attacks: password reset poisoning, cache poisoning, routing SSRF, and virtual host bypass. - [web-cache-deception](https://affpapa.org/en/nevibecode/skills/web-cache-deception.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — This skill guides checks for cached authenticated pages and cache poisoning conditions. - [mobile-ssl-pinning-bypass](https://affpapa.org/en/nevibecode/skills/mobile-ssl-pinning-bypass.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for bypassing SSL pinning in mobile apps: Android and iOS methods plus framework-specific tricks for Flutter, React Native and Xamarin. - [insecure-source-code-management](https://affpapa.org/en/nevibecode/skills/insecure-source-code-management.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Detects exposed .git, .svn, and .hg repositories along with leaked .env files. - [crlf-injection](https://affpapa.org/en/nevibecode/skills/crlf-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for CRLF injection: smuggling carriage-return and line-feed characters into response headers, redirects and logs. - [symbolic-execution-tools](https://affpapa.org/en/nevibecode/skills/symbolic-execution-tools.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A symbolic execution playbook that keeps your agent's angr, Z3 and Unicorn scripts from breaking on state setup and missing libc hooks. - [browser-exploitation-v8](https://affpapa.org/en/nevibecode/skills/browser-exploitation-v8.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for exploiting JavaScript engine bugs: JIT type confusion, bounds elimination, V8 sandbox bypass. - [csp-bypass-advanced](https://affpapa.org/en/nevibecode/skills/csp-bypass-advanced.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A skill for picking apart Content Security Policy: which directives the policy leaves open and how data leaves the page without JavaScript. - [race-condition](https://affpapa.org/en/nevibecode/skills/race-condition.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A skill for testing web apps for race conditions and TOCTOU: parallel requests, rate-limit bypass, one-time operations. - [http-parameter-pollution](https://affpapa.org/en/nevibecode/skills/http-parameter-pollution.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Guides agents through HTTP Parameter Pollution tests when WAFs, proxies, and backends parse duplicate parameters differently. - [deserialization-insecure](https://affpapa.org/en/nevibecode/skills/deserialization-insecure.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — This skill helps find unsafe deserialization in Java, PHP, and Python and review possible attack chains. - [format-string-exploitation](https://affpapa.org/en/nevibecode/skills/format-string-exploitation.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Walks through exploiting printf-family calls that take a user-controlled format string: stack reads, writes via %n, GOT overwrites. - [kernel-exploitation](https://affpapa.org/en/nevibecode/skills/kernel-exploitation.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A Linux kernel security research playbook for AI coding assistants. - [request-smuggling](https://affpapa.org/en/nevibecode/skills/request-smuggling.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — This skill tests HTTP desynchronization between front proxies and origin servers. - [file-access-vuln](https://affpapa.org/en/nevibecode/skills/file-access-vuln.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A routing skill for testing download endpoints, file paths, LFI and upload flows. - [xxe-xml-external-entity](https://affpapa.org/en/nevibecode/skills/xxe-xml-external-entity.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — Guides your agent through XXE vulnerability auditing across XML, SVG, SOAP, and Office document parsing pipelines. - [graphql-and-hidden-parameters](https://affpapa.org/en/nevibecode/skills/graphql-and-hidden-parameters.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — A playbook for GraphQL and hidden parameter testing: introspection, batching, undocumented fields and authorization gaps. - [ssti-server-side-template-injection](https://affpapa.org/en/nevibecode/skills/ssti-server-side-template-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3600 installs — An SSTI playbook: find server-side template injection, fingerprint the engine, and follow the chain to command execution. - [binary-protection-bypass](https://affpapa.org/en/nevibecode/skills/binary-protection-bypass.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A skill that walks through ELF binary protections and the bypass for each one. - [cmdi-command-injection](https://affpapa.org/en/nevibecode/skills/cmdi-command-injection.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — This skill helps find command injection where user input reaches shells, process execution, converters, import pipelines, or blind OOB sinks. - [anti-debugging-techniques](https://affpapa.org/en/nevibecode/skills/anti-debugging-techniques.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — Anti-debugging detection and bypass playbook for protected Linux and Windows binaries. - [monetizing-innovation](https://affpapa.org/en/nevibecode/skills/monetizing-innovation.md) — skill · wondelai · Claude Code, Codex, Cursor +3 · 3100 installs — This skill tests willingness to pay, shapes pricing and packaging, and helps choose a monetization model before product work is locked in. - [good-strategy-bad-strategy](https://affpapa.org/en/nevibecode/skills/good-strategy-bad-strategy.md) — skill · wondelai · Claude Code, Codex, Cursor +3 · 3100 installs — Turns a strategy doc into Rumelt's kernel — an honest diagnosis, a guiding policy, coherent action — and flags the fluff that passes for planning. - [academic-humanizer](https://affpapa.org/en/nevibecode/skills/academic-humanizer.md) — skill · AIScientists-Dev · Claude Code, Codex, Cursor +3 · 539 installs — Edits AI-assisted scientific papers and grant proposals into clear academic prose. - [uv](https://affpapa.org/en/nevibecode/skills/uv.md) — skill · astral-sh · Claude Code, Codex, Cursor +3 · 4900 installs — Directs AI coding assistants to manage Python projects and scripts with uv instead of pip or poetry. - [tanstack-router-best-practices](https://affpapa.org/en/nevibecode/skills/tanstack-router-best-practices.md) — skill · DeckardGer · Claude Code, Codex, Cursor +3 · 7100 installs — A rule set for TanStack Router in React: type safety, data loading, search params, navigation. - [ralph-tui-create-beads-rust](https://affpapa.org/en/nevibecode/skills/ralph-tui-create-beads-rust.md) — skill · subsy · Claude Code, Codex, Cursor +3 · 986 installs — Turns a PRD into an epic plus child beads through the br CLI, so ralph-tui can run the tasks on its own. - [team-level](https://affpapa.org/en/nevibecode/skills/team-level.md) — skill · Donchitos · Claude Code, Codex, Cursor +3 · 447 installs — Orchestrates game development subagents to design complete playable areas. - [banner-creator](https://affpapa.org/en/nevibecode/skills/banner-creator.md) — skill · ReScienceLab · Claude Code, Codex, Cursor +3 · 1800 installs — Generates banners through AI image generation, offering batch variations, an HTML preview, and ratio cropping. - [momentic-result-classification](https://affpapa.org/en/nevibecode/skills/momentic-result-classification.md) — skill · momentic-ai · Claude Code, Codex, Cursor +3 · 68500 installs — Reads failed Momentic runs through MCP, pinpoints the step where the run first went wrong, explains why, and files the verdict under a category. - [momentic-test](https://affpapa.org/en/nevibecode/skills/momentic-test.md) — skill · momentic-ai · Claude Code, Codex, Cursor +3 · 68500 installs — Guides coding agents in writing, running, and editing Momentic browser E2E tests in YAML format. - [documentation](https://affpapa.org/en/nevibecode/skills/mcollina-documentation.md) — skill · mcollina · Claude Code, Codex, Cursor +3 · 1800 installs — Structures technical documentation using the Diátaxis framework. Next: https://affpapa.org/en/nevibecode/for/gemini-cli.md?page=119 ## Refine [cli](https://affpapa.org/en/nevibecode/tag/cli.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [react](https://affpapa.org/en/nevibecode/tag/react.md) · [ui](https://affpapa.org/en/nevibecode/tag/ui.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [ios](https://affpapa.org/en/nevibecode/tag/ios.md) · [markdown](https://affpapa.org/en/nevibecode/tag/markdown.md) · [documentation](https://affpapa.org/en/nevibecode/tag/documentation.md) · [animation](https://affpapa.org/en/nevibecode/tag/animation.md) · [research](https://affpapa.org/en/nevibecode/tag/research.md) · [css](https://affpapa.org/en/nevibecode/tag/css.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md