Gemini CLI nightly adds a gate against build-file prompt injection

Gemini CLI's 0.61 nightly adds a confirmation gate when untrusted context attempts to modify build files or introduce untrusted flags. A companion sandbox patch tightens filesystem boundaries, credential handling, symbolic-link checks and runtime-state isolation. This is a nightly pre-release, so the behavior is evidence of Google's security direction rather than a stable interface.

For teams evaluating coding agents, build files and tool flags are high-leverage paths from untrusted repository content to command execution. The new gate is worth tracking and adversarially testing, but production policy should wait for a stable release and documented guarantees.