google-gemini / google-gemini/gemini-cli

Folder Trust & Security Review Flags

Open
#18,245 2 comments 0 reactions 0 assignees View on GitHub
🗓️ Public Roadmap 🛠️ In Progress area/agent kind/customer-issue priority/p3 status/bot-triaged
Dominant language
TypeScript
Stars
107k
Forks
14.6k
Avg merge
2d 3h
Merged PRs (30d)
45

Description

### What problem does this solve?
Allowing an AI agent arbitrary access to the entire file system is a security risk. Users need to be protected from accidental data modification in sensitive directories.

### How does this work?

We are implementing a "Folder Trust" system. When the CLI is initialized in a new directory, it will prompt the user to explicitly "trust" that workspace. This gives you control over which projects can use the full capabilities of the Gemini CLI. It prevents potentially malicious code from running by asking you to approve a folder before the CLI loads any project-specific configurations from it.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.