What changed
A crafted SKILL.md could set its name to ‘..’ or ‘.’ so the install landed in the parent .gemini directory and could overwrite user config. Subpaths supplied when cloning remote skills or unpacking .skill zip files could also escape the temporary working folder. Version 0.49.0 fixes all three in the skill install, link and uninstall commands, and makes zero-quota limits fail fast instead of hanging in a retry loop.
Who it affects
Gemini CLI users who install third-party agent skills.
What to do
Upgrade to 0.49.0 or later, and until then install skills only from sources you trust.
Source: https://github.com/google-gemini/gemini-cli/releases/tag/v0.49.0