plugins/developer-kit-tools/skills/gemini/SKILL.md
Provides Gemini CLI delegation workflows for large-context analysis and complex reasoning using Gemini 3.0 Flash and Gemini 3.0 Pro models, including English prompt formulation, execution flags, and safe result handling. Use when the user explicitly asks to use Gemini for tasks such as broad codebase analysis, fast iterations with Gemini 3 Flash, or deep architectural reasoning with Gemini 3 Pro. Triggers on "use gemini", "delegate to gemini", "run gemini cli", "ask gemini", "use gemini for this task", "use gemini 3 flash", "use gemini 3 pro".
npx skillsauth add giuseppe-trisciuoglio/developer-kit geminiInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Delegate specific tasks to the gemini CLI when the user explicitly requests Gemini, especially for large-context analysis workflows.
This skill provides a safe and consistent workflow to:
gemini in non-interactive mode for deterministic outputsThis skill complements existing capabilities by delegating specific tasks to Gemini when requested.
Use this skill when:
Typical trigger phrases:
Verify tool availability before delegation:
gemini --version
If unavailable, inform the user and stop execution until Gemini CLI is installed.
references/cli-command-reference.md-p for reproducible runs.Before running Gemini:
If scope is ambiguous, ask for clarification first.
Choose the appropriate model based on task complexity:
| Model | Best For | Characteristics | |-------|----------|-----------------| | gemini-3-flash | Quick iterations, prototyping, cost-sensitive tasks | Fast, cost-effective, great for simple tasks and quick feedback | | gemini-3-pro | Complex reasoning, architectural design, production-quality outputs | Powerful, deeper reasoning, higher-quality output |
Selection tips:
gemini-3-flash for quick iterations and prototypinggemini-3-pro for production-quality analysis and complex reasoninggemini-3-pro for tasks where accuracy and depth are prioritized over speedgemini-3-flash for faster feedback cycles and iterate to gemini-3-pro if neededBuild a precise English prompt from the user request.
Prompt quality checklist:
Example transformation:
Preferred baseline command:
gemini -p "<english-prompt>"
Supported options:
-m, --model <model-id> for model selection--approval-mode <default|auto_edit|yolo|plan>-y, --yolo as yolo shortcut-r, --resume <session-id-or-latest> to resume session--raw-output for unformatted output-o, --output-format <text|json|stream-json>Safety guidance:
--approval-mode default unless user asks otherwise--approval-mode plan for read-only analysis--yolo only with explicit user consentRun the selected command via Bash and capture stdout/stderr.
Examples:
# Default non-interactive delegation
gemini -p "Analyze this codebase architecture and list refactoring opportunities by impact."
# Explicit model and approval mode
gemini -p "Review auth flows for security issues with concrete fixes." -m gemini-3-pro --approval-mode plan
# Structured output for automation
gemini -p "Summarize key technical debt items as JSON array." --output-format json
# Resume latest session
gemini -r latest -p "Continue from previous analysis and focus on test coverage gaps."
When reporting Gemini output:
Use this structure when returning delegated results:
## Gemini Delegation Result
### Task
[delegated task summary]
### Command
`gemini ...`
### Key Findings
- Finding 1
- Finding 2
### Suggested Next Actions
1. Action 1
2. Action 2
### Notes
- Output language from Gemini: English
- Requires user approval before applying code changes
gemini -p "Analyze this repository for security vulnerabilities. Report only high-confidence issues with file paths, severity, and patch recommendations." -m gemini-3-flash --approval-mode plan
gemini -p "Read the available documentation and produce a concise architecture summary with component responsibilities and integration points." -m gemini-3-pro --approval-mode plan
gemini -p "Return a JSON list of top 10 refactoring opportunities with fields: title, file, impact, effort." -m gemini-3-flash --output-format json
gemini -p "Generate a minimal Express.js REST endpoint for POST /items with input validation and a unit test. Keep the implementation concise and ready to paste." -m gemini-3-flash
gemini -p "Summarize this CSV file's key statistics: row count, missing-value counts, and top 5 columns by variance. Provide a 6-line bullet summary suitable for quick triage." -m gemini-3-flash --output-format json --approval-mode plan
gemini -p "Provide 3 short alternative microcopy options (<=20 words each) for an onboarding tooltip that explains account recovery. Include a one-line A/B test metric proposal for each option." -m gemini-3-flash
gemini -p "Analyze the current system architecture and propose a detailed migration strategy to a microservices architecture. Include component boundaries, communication patterns, data ownership, and estimated risks for each migration step." -m gemini-3-pro --approval-mode plan
gemini -p "Perform a thorough security audit of the authentication and authorization layer. Identify potential vulnerabilities, rate-limiting gaps, token handling weaknesses, and injection vectors. Provide severity ratings and specific remediation steps for each finding." -m gemini-3-pro --approval-mode plan
gemini -p "Generate a production-ready TypeScript module for paginated API responses. Include input validation, error handling, retry logic with exponential backoff, and comprehensive unit tests with mocks. Follow best practices for error types, logging, and type safety." -m gemini-3-pro --approval-mode auto_edit
plan mode for analysis-only tasksdevelopment
Provides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and secrets exposure. Use when performing security audits, before deployment, reviewing authentication/authorization implementations, or ensuring OWASP compliance for Express, NestJS, and Next.js. Triggers on "security review", "check for security issues", "TypeScript security audit".
development
Provides final code cleanup after task review approval. Removes debug logs, temporary comments, dead code, optimizes imports, and improves readability. Use when asked to clean up code, polish, finalize, tidy up, remove technical debt, or prepare code for completion after review. Not for refactoring logic or fixing bugs—focused solely on cosmetic and hygiene cleanup.
tools
Ralph Wiggum-inspired automation loop for specification-driven development. Orchestrates task implementation, review, cleanup, and synchronization using a Python script. Use when: user runs /loop command, user asks to automate task implementation, user wants to iterate through spec tasks step-by-step, or user wants to run development workflow automation with context window management. One step per invocation. State machine: init → choose_task → implementation → review → fix → cleanup → sync → update_done. Supports --from-task and --to-task for task range filtering. State persisted in fix_plan.json.
testing
Creates, updates, validates, and displays the architectural DNA of a project through two shared documents: docs/specs/architecture.md (technology stack, architectural rules, security constraints, AI guardrails) and docs/specs/ontology.md (domain glossary / Ubiquitous Language). Use BEFORE brainstorm as a project setup step, or at any point in the SDD lifecycle to validate specs/tasks against architecture principles. Triggers on 'create constitution', 'update constitution', 'constitution check', 'validate against constitution', 'project principles', 'architectural guardrails', 'setup project architecture', 'define ontology'.