llm-gemini 0.37 Release: Securing Google Gemini 4 Hydrogen API Keys and Costs in Enterprise AI Deployments

---
title: LLM CLI Tool Execution with Google Gemini Model
id: 9f8e7d6c-5b4a-3c2d-1e0f-9a8b7c6d5e4f
status: experimental
description: Detects execution of the llm CLI tool referencing Google Gemini models, which may indicate ungoverned AI usage or data exfiltration risk.
references:
  - https://github.com/simonw/llm-gemini/releases/tag/0.37
  - https://attack.mitre.org/techniques/T1567/002/
author: Security Arsenal
date: 2026/11/12
tags:
  - attack.exfiltration
  - attack.t1567.002
logsource:
  category: process_creation
  product: windows
detection:
  selection_img:
    Image|endswith:
      - '\llm.exe'
      - '\python.exe'
      - '\pythonw.exe'
  selection_cli:
    CommandLine|contains:
      - 'llm '
      - 'gemini'
  condition: all of selection_*
falsepositives:
  - Legitimate developer use of authorized AI tools
level: medium
---
title: Outbound Connection to Google Gemini API Endpoint
id: 1a2b3c4d-5e6f-7a8b-9c0d-1e2f3a4b5c6d
status: experimental
description: Detects network connections to Google generative AI API endpoints from non-browser processes, suggesting programmatic API usage that may bypass DLP controls.
references:
  - https://blog.google/innovation-and-ai/models-and-research/gemini-models/introducing-gemini-4-hydrogen/
  - https://attack.mitre.org/techniques/T1071/001/
author: Security Arsenal
date: 2026/11/12
tags:
  - attack.command_and_control
  - attack.t1071.001
logsource:
  category: network_connection
  product: windows
detection:
  selection_dst:
    DestinationHostname|contains:
      - 'generativelanguage.googleapis.com'
      - 'aiplatform.googleapis.com'
  selection_img:
    Image|endswith:
      - '\python.exe'
      - '\pythonw.exe'
      - '\llm.exe'
      - '\node.exe'
      - '\curl.exe'
      - '\wget.exe'
  condition: all of selection_*
falsepositives:
  - Authorized Vertex AI workloads
  - Approved AI-assisted development tools
level: high
---
title: Shell History Containing Gemini API Key Assignment
id: 7e6d5c4b-3a2f-1e0d-9c8b-7a6f5e4d3c2b
status: experimental
description: Detects bash/zsh history files containing plaintext Google API key assignments, indicating potential credential exposure.
references:
  - https://attack.mitre.org/techniques/T1552/001/
author: Security Arsenal
date: 2026/11/12
tags:
  - attack.credential_access
  - attack.t1552.001
logsource:
  category: file_event
  product: linux
detection:
  selection_path:
    TargetFilename|endswith:
      - '/.bash_history'
      - '/.zsh_history'
      - '/.config/fish/fish_history'
  selection_content:
    TargetFilename|contains:
      - 'GOOGLE_API_KEY='
      - 'GEMINI_API_KEY='
      - 'export GOOGLE_API_KEY'
      - 'export GEMINI_API_KEY'
  condition: all of selection_*
falsepositives:
  - None expected; API keys should not appear in shell history
level: high

// Hunt for llm CLI usage and Gemini API egress
let GeminiHosts = dynamic(["generativelanguage.googleapis.com", "aiplatform.googleapis.com"]);
let SuspiciousProcs = dynamic(["llm.exe", "python.exe", "pythonw.exe", "node.exe", "curl.exe"]);
union isfuzzy=true
    (DeviceProcessEvents
    | where FileName in~ (SuspiciousProcs)
    | where ProcessCommandLine has_any ("llm", "gemini")
    | project Timestamp, DeviceName, AccountName, FileName, ProcessCommandLine, InitiatingProcessFileName
    | extend Indicator = "ProcessExecution"),
    (DeviceNetworkEvents
    | where RemoteUrl in~ (GeminiHosts)
    | where InitiatingProcessFileName in~ (SuspiciousProcs)
    | project Timestamp, DeviceName, InitiatingProcessAccountName, InitiatingProcessFileName, InitiatingProcessCommandLine, RemoteUrl, RemoteIP
    | extend Indicator = "NetworkEgress"),
    (CommonSecurityLog
    | where DestinationHostName in~ (GeminiHosts)
    | where ApplicationProtocol =~ "HTTPS"
    | where SourceProcessName in~ (SuspiciousProcs) or SourceProcessName has "python"
    | project TimeGenerated, SourceIP, SourceProcessName, DestinationHostName, DestinationIP, RequestURL
    | extend Indicator = "FirewallEgress")
| order by Timestamp desc
| take 500

-- Hunt for llm CLI and Gemini API usage
SELECT Pid,
       Name,
       Exe,
       CommandLine,
       Username,
       CreateTime,
       netstat().RemoteAddrIP AS RemoteIP,
       netstat().RemoteAddrPort AS RemotePort
FROM pslist()
WHERE CommandLine =~ '(?i)(llm|gemini|generativelanguage|aiplatform)'
   OR Exe =~ '(?i)(llm\.exe|python.*\.exe)'
ORDER BY CreateTime DESC

# Audit-LLMGeminiUsage.ps1
# Checks for llm installation and exposed Gemini API keys

$Results = @()

# Check if llm is installed
$LLMPath = Get-Command llm -ErrorAction SilentlyContinue
if ($LLMPath) {
    $Results += [PSCustomObject]@{
        Hostname = $env:COMPUTERNAME
        Check = "LLM CLI Installed"
        Status = "Found"
        Details = $LLMPath.Source
    }
}

# Check for Gemini plugin
if ($LLMPath) {
    $Plugins = & llm plugins list 2>$null | Select-String -Pattern "gemini"
    if ($Plugins) {
        $Results += [PSCustomObject]@{
            Hostname = $env:COMPUTERNAME
            Check = "llm-gemini Plugin"
            Status = "Found"
            Details = ($Plugins -join "; ")
        }
    }
}

# Check environment variables for API keys
$EnvKeys = Get-ChildItem Env: | Where-Object { $_.Name -match "GOOGLE_API_KEY|GEMINI_API_KEY" }
foreach ($Key in $EnvKeys) {
    $Results += [PSCustomObject]@{
        Hostname = $env:COMPUTERNAME
        Check = "Exposed API Key in Env"
        Status = "ALERT"
        Details = "$($Key.Name) is set"
    }
}

# Check common dotfiles for hardcoded keys
$Dotfiles = @("$env:USERPROFILE\.bashrc", "$env:USERPROFILE\.zshrc", "$env:USERPROFILE\.env")
foreach ($File in $Dotfiles) {
    if (Test-Path $File) {
        $Content = Get-Content $File -Raw
        if ($Content -match "GOOGLE_API_KEY\s*=|GEMINI_API_KEY\s*=") {
            $Results += [PSCustomObject]@{
                Hostname = $env:COMPUTERNAME
                Check = "Hardcoded API Key in $File"
                Status = "ALERT"
                Details = "File contains plaintext key assignment"
            }
        }
    }
}

if ($Results.Count -eq 0) {
    $Results += [PSCustomObject]@{
        Hostname = $env:COMPUTERNAME
        Check = "LLM/Gemini Audit"
        Status = "Clean"
        Details = "No indicators found"
    }
}

$Results | Format-Table -AutoSize