geml avatar

geml

One format, two readers. People and AI agents now co-write the same document. Legible for people; addressable, verifiable, and versioned for machines. GEML is plain text — organized by one typed block for everything, remembered by a .gemlhistory sidecar.

PluginKnowledgeCode review
Verification
L2 · Structured
Security
Low
Health
Active
Trust
Silver

What it does

One format, two readers. People and AI agents now co-write the same document. Legible for people; addressable, verifiable, and versioned for machines. GEML is plain text — organized by one typed block for everything, remembered by a .gemlhistory sidecar.

Installation

dsh plugin --profile web add geml

Install method: npm · not yet tested in container (L3+)

Compatibility

DSH VersionStatus
not statedDeclared — not tested

Requirements

  • • Node.js: not stated
  • • DSH: declared "not stated"
  • • External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOPASSEDSCAN15 FILES
86e3e2
Automated review · daily
PASSED

No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.

0 critical·0 warning·3 info·15 files scanned
scanned commit86e3e2479d2a2026-08-17
latest commit86e3e2479d2a

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Low0 critical · 0 warning · 3 info

• Static heuristic scan: done (15 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 3

  • infoReads process.env.claude/hooks/inject-instructions.mjs:15
    const root = process.env.CLAUDE_PROJECT_DIR || process.cwd();
  • infoMakes network requests (fetch / axios)playground/entry.js:37
    const res = await fetch(url, { cache: "no-cache" });
  • infoMakes network requests (fetch / axios)playground/entry.js:56
    const res = await fetch(rel, { cache: "no-cache" });

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-17 · activity: Active

• Repo created: 2026-08-17

• Stars: ★ 24 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/geml-spec/geml

Was this page helpful?