# Posts by tag 'gemini cli' — Liran Tal

AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks.

Canonical: https://lirantal.com/tag/gemini-cli

*   Jul 17, 2026 · 12 min read

    ## [Invisible Unicode Can Hijack Gemini CLI Agent Skills](/blog/gemini-cli-invisible-unicode-skill-injection)

    I disclosed a Gemini CLI prompt injection where invisible Unicode tag characters in SKILL.md caused the agent to run a hidden command. Google closed the report as out of scope because the workspace was trusted and YOLO mode was enabled.

    *   [security](/tag/security)
    *   [ai agents](/tag/ai-agents)
    *   [gemini cli](/tag/gemini-cli)
    *   [prompt injection](/tag/prompt-injection)
    *   [unicode](/tag/unicode)

     [![](/_astro/gemini-cli-invisible-unicode-skill-injection.AW0ivLkB_Z2nFK4g.png)](/blog/gemini-cli-invisible-unicode-skill-injection)