Skip to content

feat(skills): package 4 Google Gemini skills#502

Merged
JAORMX merged 1 commit into
mainfrom
skills/gemini
Apr 20, 2026
Merged

feat(skills): package 4 Google Gemini skills#502
JAORMX merged 1 commit into
mainfrom
skills/gemini

Conversation

@JAORMX
Copy link
Copy Markdown
Collaborator

@JAORMX JAORMX commented Apr 20, 2026

Summary

Packages 4 Gemini API development skills from google-gemini/gemini-skills (Apache-2.0) into Dockyard. All skills pinned to upstream commit 5b655a4 (main as of 2026-03-27).

Sixth vendor in the per-vendor skills sweep. Complements Dockyard's existing Anthropic claude-api skill.

Tracks #480.

Skills added

  • gemini-api-dev — Gemini API (content generation, multimodal, function calling, structured output) with google-genai SDKs across Python, JS/TS, Go, and Java
  • gemini-interactions-api — Interactions API: unified model+agent interface with server-side conversation state, streaming, and background Deep Research agent
  • gemini-live-api-dev — Live API: real-time bidirectional WebSocket audio/video/text streaming, VAD, native audio, session management, ephemeral tokens
  • vertex-ai-api-dev — Gemini on Google Cloud Vertex AI: enterprise Gen AI SDK across Python, JS/TS, Go, Java, and C#/.NET

MCP dependency note

All four skills mention the "Google MCP" / "Developer Knowledge MCP" server as an optional documentation lookup enhancement. Each SKILL.md explicitly provides a "When MCP is NOT Installed (Fallback Only)" path that fetches documentation from ai.google.dev via URL. There is no hard MCP dependency declared in frontmatter allowed-tools, so these are eligible per skill-criteria.md.

Security allowlists

All 4 skills carry MANIFEST_MISSING_LICENSE (INFO) — upstream is Apache-2.0 at the repo root, not as SPDX in per-skill SKILL.md frontmatter. No other scanner findings on any of the 4.

Test plan

  • task validate-skill on all 4 — all VALID
  • Cisco AI Defense skill-scanner 2.0.9 — all pass after allowlist
  • CI: Build Skill Artifacts workflow succeeds
  • CI: skill-scan-report surfaces only allowlisted findings
  • Post-merge: 4 OCI artifacts published

Closes #480

Packages 4 Gemini API development skills from google-gemini/gemini-skills
(Apache-2.0) into Dockyard, pinned to upstream commit 5b655a4
(main as of 2026-03-27).

Sixth vendor in the per-vendor skills sweep. Complements Dockyard's
existing Anthropic `claude-api` skill.

- gemini-api-dev — Gemini API (content generation, multimodal, function
  calling, structured output) with google-genai SDKs across Python, JS/TS,
  Go, and Java.
- gemini-interactions-api — Interactions API: unified model+agent
  interface with server-side conversation state, streaming, and
  background Deep Research agent.
- gemini-live-api-dev — Live API: real-time bidirectional WebSocket
  audio/video/text streaming, VAD, native audio, session management,
  ephemeral tokens.
- vertex-ai-api-dev — Gemini on Google Cloud Vertex AI: enterprise Gen
  AI SDK across Python, JS/TS, Go, Java, and C#/.NET.

MCP dependency note: all four skills reference the "Google MCP" /
"Developer Knowledge MCP" server as an OPTIONAL documentation lookup
enhancement, with explicit "When MCP is NOT Installed (Fallback Only)"
paths that fetch URLs from ai.google.dev directly. There is no hard
MCP dependency declared in frontmatter `allowed-tools`, so these are
eligible for inclusion per skill-criteria.md.

Security allowlists:
All 4 skills carry MANIFEST_MISSING_LICENSE — upstream Apache-2.0 at
the repo root, not as SPDX in per-skill SKILL.md frontmatter. No other
scanner findings.

All 4 skills pass `task validate-skill` and `task scan-skill`.

Refs #480
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@github-actions
Copy link
Copy Markdown
Contributor

🛡️ Skill Security Scan Results

✅ gemini-api-dev

  • Status: Passed
  • Findings: 1
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: google-gemini/gemini-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ gemini-interactions-api

  • Status: Passed
  • Findings: 1
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: google-gemini/gemini-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ gemini-live-api-dev

  • Status: Passed
  • Findings: 1
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: google-gemini/gemini-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ vertex-ai-api-dev

  • Status: Passed
  • Findings: 1
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: google-gemini/gemini-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

Summary: Scanned 4 skill(s), all passed security checks. ✅

@JAORMX JAORMX added the skills Skill packaging, vendor skill imports label Apr 20, 2026
@JAORMX JAORMX merged commit 0ed899a into main Apr 20, 2026
17 checks passed
@JAORMX JAORMX deleted the skills/gemini branch April 20, 2026 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skills Skill packaging, vendor skill imports

Projects

None yet

Development

Successfully merging this pull request may close these issues.

skill: package google-gemini/gemini-skills into dockyard

2 participants