by clduab11
rUv's Claude-Flow, translated to the new Gemini CLI; transforming it into an autonomous AI development team.
# Add to your Claude Code skills
git clone https://github.com/clduab11/gemini-flowLast scanned: 5/24/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@babel/plugin-transform-modules-systemjs: @babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@isaacs/brace-expansion: @isaacs/brace-expansion has Uncontrolled Resource Consumption",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@mapbox/node-pre-gyp: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Anthropic's MCP TypeScript SDK has a ReDoS vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/server-github: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/server-memory: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/server-puppeteer: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/server-sequential-thinking: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@protobufjs/utf8: protobufjs has overlong UTF-8 decoding",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@rollup/plugin-terser: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping",
"severity": "low"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/eslint-plugin: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/parser: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/type-utils: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/typescript-estree: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@typescript-eslint/utils: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "axios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF",
"severity": "high"
},
{
"type": "npm-audit",
"message": "basic-ftp: Basic FTP has Path Traversal Vulnerability in its downloadToDir() method",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "body-parser: body-parser is vulnerable to denial of service when url encoding is used",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "bull: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "canvas: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
"severity": "low"
},
{
"type": "npm-audit",
"message": "engine.io: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "engine.io-client: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "glob: glob CLI: Command injection via -c/--cmd executes matches with shell:true",
"severity": "high"
},
{
"type": "npm-audit",
"message": "googleapis: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "googleapis-common: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "jws: auth0/node-jws Improperly Verifies HMAC Signature",
"severity": "high"
},
{
"type": "npm-audit",
"message": "libnpmdiff: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
"severity": "high"
},
{
"type": "npm-audit",
"message": "lodash-es: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "node-forge: node-forge has ASN.1 Unbounded Recursion",
"severity": "high"
},
{
"type": "npm-audit",
"message": "npm: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "pacote: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "protobufjs: Arbitrary code execution in protobufjs",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
"severity": "high"
},
{
"type": "npm-audit",
"message": "socket.io-adapter: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "socket.io-parser: socket.io allows an unbounded number of binary attachments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "socks: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "tar-fs: tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball",
"severity": "high"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "valibot: Valibot has a ReDoS vulnerability in `EMOJI_REGEX`",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"severity": "medium"
}
],
"status": "FAILED",
"scannedAt": "2026-05-24T07:23:34.041Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
⚡ A2A + MCP Dual Protocol Support | 🌟 Complete Google AI Services Integration | 🧠 66 Specialized AI Agents | 🚀 396,610 SQLite ops/sec
⭐ Star this repo | 🎯 Live Demo | 📚 Documentation | 🤝 Join the Revolution
Hi all! I wanted to write a short message thanking each and every one of you for supporting the repo and sharing it and I hope it was super useful for you!! As of January 29, 2026, this project will be archived/read-only.
Generative AI writ large is moving too fast given the amount of repositories I'm not managing have exploded, and with some of Google's latest releases (Antigravity), it really discontinues the need for this type of project.
I will keep it archived/read-only as a growing/learning experience! Thanks so much everyone; y'all have been awesome!!!
-clduab11
Gemini-Flow is the production-ready AI orchestration platform that transforms how organizations deploy, manage, and scale AI systems with real Google API integrations, agent-optimized architecture, and enterprise-grade reliability.
This isn't just another AI framework. This is the practical solution for enterprise AI orchestration with A2A + MCP dual protocol support, real-time processing capabilities, and production-ready agent coordination.
# Production-ready AI orchestration in 30 seconds
npm install -g @clduab11/gemini-flow
gemini-flow init --protocols a2a,mcp --topology hierarchical
# Deploy intelligent agent swarms that scale with your business
gemini-flow agents spawn --count 50 --specialization "enterprise-ready"
# NEW: Official Gemini CLI Extension (October 8, 2025)
gemini extensions install https://github.com/clduab11/gemini-flow # Install as Gemini extension
gemini extensions enable gemini-flow # Enable the extension
gemini hive-mind spawn "Build AI application" # Use commands in Gemini CLI
🚀 Modern Protocol Support: Native A2A and MCP integration for seamless inter-agent communication and model coordination
⚡ Enterprise Performance: 396,610 ops/sec with <75ms routing latency
🛡️ Production Ready: Byzantine fault tolerance and automatic failover
🔧 Google AI Native: Complete integration with all 8 Google AI services
🔌 Gemini CLI Extension: Official October 8, 2025 extension framework support
Transform your applications with seamless access to Google's most advanced AI capabilities through a single, unified interface. Our platform orchestrates all Google AI services with intelligent routing, automatic failover, and cost optimization.
// One API to rule them all - Access all 8 Google AI services
import { GoogleAIOrchestrator } from '@clduab11/gemini-flow';
const orchestrator = new GoogleAIOrchestrator({
services: ['veo3', 'imagen4', 'lyria', 'chirp', 'co-scientist', 'mariner', 'agentspace', 'streaming'],
optimization: 'cost-performance',
protocols: ['a2a', 'mcp']
});
// Multi-modal content creation workflow
const creativeWorkflow = await orchestrator.createWorkflow({
// Generate video with Veo3
video: {
service: 'veo3',
prompt: 'Product demonstration video',
duration: '60s',
quality: '4K'
},
// Create thumbnail with Imagen4
thumbnail: {
service: 'imagen4',
prompt: 'Professional product thumbnail',
style: 'corporate',
dimensions: '1920x1080'
},
// Compose background music with Lyria
music: {
service: 'lyria',
genre: 'corporate-upbeat',
duration: '60s',
mood: 'professional-energetic'
},
// Generate voiceover with Chirp
voiceover: {
service: 'chirp',
text: 'Welcome to our revolutionary product',
voice: 'professional-female',
language: 'en-US'
}
});
World's Most Advanced AI Video Creation Platform
# Deploy Veo3 video generation with enterprise capabilities
gemini-flow veo3 create \
--prompt "Corporate training video: workplace safety procedures" \
--style "professional-documentary" \
--duration "120s" \
--quality "4K" \
--fps 60 \
--aspect-ratio "16:9" \
--audio-sync true
Production Metrics:
Ultra-High Fidelity Image Generation with Enterprise Scale
// Professional image generation with batch processing
const imageGeneration = await orchestrator.imagen4.createBatch({
prompts: [
'Professional headshot for LinkedIn profile',
'Corporate office interior design concept',
'Product packaging design mockup',
'Marketing banner for social media campaign'
],
styles: ['photorealistic', 'architectural', 'product-design', 'marketing'],
quality: 'ultra-high',
batchOptimization: true,
costControl: 'aggressive'
});
Enterprise Performance:
Quantum-Enhanced Autonomous Coding with 96-Agent Swarm Intelligence
Gemini-Flow integrates Google's Jules Tools to create the industry's first quantum-classical hybrid autonomous development platform, combining asynchronous cloud VM execution with our specialized agent swarm and Byzantine consensus validation.
# Remote execution with Jules VM + Agent Swarm
gemini-flow jules remote create "Implement OAuth 2.0 authentication" \
--type feature \
--priority high \
--quantum \
--consensus
# Local swarm execution with quantum optimization
gemini-flow jules local execute "Refactor monolith to microservices" \
--type refactor \
--topology hierarchical \
--quantum
# Hybrid mode: Local validation + Remote execution
gemini-flow jules hybrid create "Optimize database queries" \
--type refactor \
--priority critical
Revolutionary Features:
Performance Metrics:
See Jules Integration Documentation for complete details.
Why use one AI when you can orchestrate a swarm of 66 specialized agents working in perfect harmony through A2A + MCP protocols? Our coordination engine doesn't just parallelize—it coordinates intelligently.
# Deploy coordinated agent teams for enterprise solutions
gemini-flow hive-mind spawn \
--objective "enterprise digital transformation" \
--agents "architect,coder,analyst,strategist" \
--protocols a2a,mcp \
--topology hierarchical \
--consensus byzantine
# Watch as 66 specialized agents coordinate via A2A protocol:
# ✓ 12 architect agents design system via coordinated planning
# ✓ 24 coder agents implement in parallel with MCP model coordination
# ✓ 18 analyst agents optimize performance through shared insights
# ✓ 12 strategist agents align on goals via consensus mechanisms
Our agents don't just work together—they achieve consensus even when 33% are compromised through advanced A2A coordination:
Our 66 specialized agents aren't just workers—they're domain experts coordinating through A2A and MCP protocols for unprecedented collaboration: