Doramagic Project Pack · Human Manual
agents-cli
agents-cli is a command-line toolkit for building, evaluating, and deploying AI agents on Google Cloud. The CLI exposes a layered set of subcommands that correspond to the agent developmen...
Introduction and Installation
Related topics: CLI Commands and Agent Lifecycle, Agent Skills Reference
Continue reading this section for the full explanation and source context.
Related Pages
Related topics: CLI Commands and Agent Lifecycle, Agent Skills Reference
Introduction and Installation
Agents CLI (agents-cli) is a Google-maintained command-line toolkit for the complete lifecycle of AI agents built on the Agent Development Kit (ADK) and the Agent2Agent (A2A) protocol. It packages scaffolding, local build, evaluation, deployment, infrastructure provisioning, and skill-driven workflow guidance into a single binary, targeting Google Cloud Agent Runtime, Cloud Run, and GKE as primary deployment surfaces Source: README.md:1-40. As of v1.0.0 the project is Generally Available, with redeploys preserving existing deployment specs on Agent Runtime and Cloud Run, and agent_runtime deploys honoring .gcloudignore/.gitignore when packaging source Source: README.md:1-25.
Purpose and Scope
The CLI is organized around a fixed lifecycle that is also surfaced as machine-readable skills:
spec -> scaffold -> build -> evaluate -> deploy -> publish/observe
The aim is to keep every phase addressable both interactively and programmatically, so that the same commands used by a developer at the terminal can be invoked by an automated coding agent through the bundled skill files Source: docs/src/index.md:1-60. The shipped skills (google-agents-cli-workflow, google-agents-cli-deploy, google-agents-cli-adk-code, etc.) explicitly describe these phases and tell the consuming agent when to re-verify against the official Google docs before generating code, a behavior proposed in community discussion #44 to reduce stale-output drift Source: docs/src/index.md:30-90.
The CLI is not a generic Python agent framework. It is an opinionated automation layer over google-adk, the Vertex AI Agent Engine SDK, Cloud Run, GKE, and Terraform, with first-class templates such as adk, adk_a2a, tool, sub_agent, and the new clone-and-study RAG recipes (rag-vector-search, etc.) introduced in v1.0.0 Source: README.md:1-30.
Prerequisites
The installation and first-run experience assumes a working Python toolchain, the Google Cloud CLI, and Application Default Credentials. The minimum surface area is:
| Component | Purpose |
|---|---|
| Python (matching the project's expected range) | Runs the CLI; mismatched interpreter versions on agent_runtime deploys are a known failure mode (see #36) |
uv (recommended) or pip | Installs and isolates the CLI |
Google Cloud CLI (gcloud) | Required for ADC and Cloud Run / Agent Runtime / GKE deploys |
| Git | Used by scaffold create --agent <remote> to fetch templates |
| Terraform | Required only for the infra subcommands |
On Windows, several users have reported friction with Python version management, gcloud PATH handling, and ADC setup; the infra commands are also called out for lacking a safe-by-default dry-run mode, tracked in #4 and #21 Source: docs/src/guide/getting-started.md:1-80.
Installation
The supported installation path uses uv, which both manages the Python interpreter and installs the CLI as an isolated tool:
# Install uv if not already present
curl -LsSf https://astral.sh/uv/install.sh | sh
# Install agents-cli as a global uv tool
uv tool install agents-cli
# Verify
agents-cli --version
If uv is not desired, the project can be installed from a clone with pip install -e ., but the project README and guide both recommend the uv tool route because it avoids polluting the system interpreter and makes Python-version mismatches during agent_runtime deploys easier to diagnose Source: docs/src/guide/getting-started.md:40-120. Once installed, the agents-cli binary exposes a help tree organized around the lifecycle commands (scaffold, build, eval, deploy, infra, update) Source: README.md:40-120.
For updates, agents-cli update re-resolves and reinstalls the tool. On non-UTF-8 Windows consoles this command historically flooded output with UnicodeDecodeError tracebacks; the fix is to launch the terminal with chcp 65001 or to install under a modern Windows Terminal session, as documented in issue #37 Source: docs/src/guide/getting-started.md:80-140.
Authentication
All cloud-touching commands (deploy, infra, eval against Vertex, etc.) require authenticated access to Google Cloud. The canonical path is Application Default Credentials:
gcloud auth login
gcloud auth application-default login
gcloud config set project <YOUR_PROJECT_ID>
The CLI additionally honors a service-account key path and an explicit GOOGLE_APPLICATION_CREDENTIALS environment variable for CI environments Source: docs/src/guide/authentication.md:1-60. After authentication, the project ID can be passed to most commands via --project, but setting it once with gcloud config is the recommended default so that agent_runtime deploys land in the expected region Source: docs/src/guide/authentication.md:30-90. Region selection matters: the adk_a2a template historically stamped the A2A Agent Card url with us-central1 regardless of the deployment region, a regression tracked in #28 and resolved by setting the Vertex location before building the agent Source: docs/src/guide/authentication.md:50-120.
First-Run Workflow
A typical first run follows the lifecycle directly:
- Scaffold —
agents-cli scaffold create my-agent --template adkproduces a ready-to-run ADK project. Remote templates can be fetched with--agent <git-url>; be aware that the manifest'ssettings.agent_directoryis used to write files into the local tree, which has been a path-traversal vector and should only be pointed at trusted repositories (see#50)Source: docs/src/guide/quickstart-tutorial.md:1-80. - Build & run locally —
agents-cli buildandagents-cli runexercise the agent on the developer machine using the project's own virtualenv. - Evaluate —
agents-cli eval generate,eval grade, andeval dataset synthbuild and score eval sets; per-case ADK session state is a community-requested addition tracked in#52Source: docs/src/guide/quickstart-tutorial.md:40-120. - Deploy —
agents-cli deploy --deployment-target agent_runtime|cloud_run|gkeships the project. v1.0.0 redeploys preserve the existing deployment spec instead of resetting unspecified settingsSource: README.md:5-25. - Operate —
agents-cli infra(Terraform-backed) provisions supporting resources, and observability hooks are surfaced for the publish/observe phaseSource: docs/src/index.md:60-140.
This progression is the same flow that the google-agents-cli-workflow skill encodes for coding agents, ensuring human-driven and agent-driven usage stay aligned.
Source: https://github.com/google/agents-cli / Human Manual
CLI Commands and Agent Lifecycle
Related topics: Introduction and Installation, Agent Skills Reference, Templates, Deployment Targets, and Known Issues
Continue reading this section for the full explanation and source context.
Continue reading this section for the full explanation and source context.
Continue reading this section for the full explanation and source context.
Continue reading this section for the full explanation and source context.
Related Pages
Related topics: Introduction and Installation, Agent Skills Reference, Templates, Deployment Targets, and Known Issues
CLI Commands and Agent Lifecycle
Overview
agents-cli is a command-line toolkit for building, evaluating, and deploying AI agents on Google Cloud. The CLI exposes a layered set of subcommands that correspond to the agent development lifecycle described in the project's skill workflow:
spec → scaffold → build → evaluate → deploy → publish
This lifecycle contract is proposed as an optional machine-readable AISP specification in #47, and the CLI itself is the operational surface that drives each phase. The top-level entry point wires these phases into a single Click/Typer application. Source: src/google/agents/cli/main.py:1-60.
The CLI is intentionally split across several command groups so that each lifecycle phase can evolve independently while sharing a common agent manifest and config layer.
Command Groups and Lifecycle Phases
Setup and Self-Update
The setup group bootstraps the local environment. It manages authentication, ADC configuration, and prerequisite checks before any other command is usable. Source: src/google/agents/cli/setup/cmd_setup.py:1-40.
The top-level agents-cli update command refreshes the CLI installation. On non-UTF-8 Windows consoles this command has been observed to emit Python UnicodeDecodeError tracebacks because the update stream is decoded without an explicit encoding. This is tracked in #37 and motivates safer stream decoding for Windows users (see also #21 for the broader Windows-friction discussion).
Scaffold — `spec` and `build`
The scaffold group materializes a project from a template. Three subcommands drive this phase:
agents-cli scaffold create <project>— generates a new agent project from a built-in or remote template. Source: src/google/agents/cli/scaffold/commands/create.py:1-80.agents-cli scaffold enhance— incrementally improves an existing scaffolded project. Source: src/google/agents/cli/scaffold/commands/enhance.py:1-60.agents-cli scaffold upgrade— migrates an older scaffold to the current template version. Source: src/google/agents/cli/scaffold/commands/upgrade.py:1-60.
Scaffolding accepts both built-in templates (e.g. adk, adk_a2a, tool, sub_agent) and remote Git repositories via --agent <remote-repo>. The remote path is a documented convenience, but it is also a security boundary: a malicious agents-cli-manifest.yaml can set settings.agent_directory to a path-traversal value, producing arbitrary file writes on the host. This is the root cause of the vulnerability reported in #50, and the recommended mitigation is path validation plus an interactive confirmation prompt when the template source is remote.
A long-standing limitation in the adk_a2a template is that the Vertex region is not propagated into the generated A2A Agent Card. Deploys to non-us-central1 regions therefore stamp us-central1 into the card's url even though the reasoningEngines/<id> resource is created in the correct region. See #28.
Evaluate — `evaluate`
The eval group covers dataset synthesis, generation, and grading. The generation subcommand runs the agent against eval cases and emits traces. Source: src/google/agents/cli/eval/cmd_generate.py:1-90.
Community requests in this area focus on richer per-case configuration and contract coverage:
- Per-eval-case ADK session state initialization via
EvalCase.session_input.stateis requested in #52. - An optional AISP eval quality contract (dataset coverage, grading rubric, failure analysis, optimization traces) is proposed in #49.
Together, these requests point toward making eval generate a first-class reproducibility surface rather than a one-shot runner.
Deploy — `deploy`
The deploy group ships agents to a target environment. The supported --deployment-target values are agent_runtime (Vertex AI Agent Engine), cloud_run, and gke. v1.0.0 preserves the existing deployment spec on Agent Runtime and Cloud Run during redeploys, and now honors .gcloudignore and .gitignore when packaging source for Agent Runtime uploads.
Two deployment-target-specific limitations are tracked in the issue tracker:
- The build/runtime Python version for
agent_runtimeis taken fromsys.version_infoof the interpreter running the CLI, not from the target project's Python. Auv-installed CLI on Python 3.14 against a project pinned to Python 3.11 (withlitellmwheels only for 3.11) fails. See #36 and the related feature request for an explicit--python-versionflag in #45. - A2A agents on
agent_runtimeare scaffolded with in-memory session and task stores, and the Agent Runtime Console Playground does not yet surface full A2A controls. See #5.
An optional AISP deployment readiness contract — covering eval, approval, deploy, rollback, and observability gates — is proposed in #48 to make deploy safe-by-default.
Infra and Cross-Cutting Commands
The infra group wraps Terraform for supporting resources. Unlike other commands, infra currently proceeds straight to terraform apply, which the community has flagged as a safety regression; #4 requests that infra default to terraform plan and require explicit confirmation before applying.
The cross-cutting workflow skill google-agents-cli-workflow ties these phases together. #44 proposes a "verify against official docs" step that runs before any code generation in the workflow and in phase-specific skills, to prevent the CLI from drifting away from upstream ADK and Agent Engine semantics.
Lifecycle Diagram
flowchart LR
A[spec] --> B[scaffold create/enhance/upgrade]
B --> C[build]
C --> D[eval generate/grade]
D --> E[deploy agent_runtime/cloud_run/gke]
E --> F[observe / publish]
F -. feedback .-> ACross-References
Source: https://github.com/google/agents-cli / Human Manual
Agent Skills Reference
Related topics: CLI Commands and Agent Lifecycle, Templates, Deployment Targets, and Known Issues
Continue reading this section for the full explanation and source context.
Related Pages
Related topics: CLI Commands and Agent Lifecycle, Templates, Deployment Targets, and Known Issues
Agent Skills Reference
Overview and Purpose
Agent Skills are the structured, machine-readable guidance documents that teach a coding agent how to use agents-cli. They live under the top-level skills/ directory and are consumed by an Agent Development Kit (ADK)-compatible agent to drive the full lifecycle of an agent project. The skills index in skills/README.md catalogs each available skill and explains the load order the host agent should use when multiple skills apply to the same task.
Skills are organized around a single master workflow skill plus several phase-specific skills, one per lifecycle phase. The lifecycle they collectively support is:
spec → scaffold → build → evaluate → deploy → publish → observe
This lifecycle is the conceptual spine of the project and is referenced from nearly every skill body. It is also the basis of several community proposals to add optional machine-readable contracts, such as an AISP lifecycle contract (issue #47) that would formalize each transition as a schema-validated artifact.
Workflow Skill (`google-agents-cli-workflow`)
The orchestrating skill is skills/google-agents-cli-workflow/SKILL.md. It is loaded first by the host agent and is responsible for routing the user's intent to the correct phase skill. The SKILL.md body declares the entry conditions, exit conditions, and required artifacts for each phase, plus a short prose description of what the host agent is allowed to do autonomously versus what must be confirmed with the user.
The workflow skill defers all command-level detail to a references/ subdirectory:
| Reference | Purpose |
|---|---|
references/commands.md | Authoritative listing of every agents-cli subcommand, its flags, and example invocations. |
references/terminology.md | Glossary of canonical terms (e.g. *agent*, *skill*, *spec*, *scaffold*) that phase skills must use consistently. |
references/spec-template.md | The Markdown template the host agent fills in during the spec phase before scaffolding begins. |
The workflow skill also enforces a "verify against official docs" step before any code is generated, which is tracked as an explicit feature request in issue #44 for the google-agents-cli-workflow, google-agents-cli-deploy, and google-agents-cli-adk-code skills.
Phase-Specific Skills
Each lifecycle phase has its own skill folder whose SKILL.md is loaded on demand by the host agent. Phase-specific skills are scoped narrowly so they can be swapped or extended independently. Examples referenced in the community context include:
google-agents-cli-adk-code— coding conventions for ADK agents. Defined inskills/google-agents-cli-adk-code/SKILL.md, this skill prescribes the Python patterns, file layout, and module boundaries a generated ADK project must follow.google-agents-cli-deploy— production deployment concerns (Agent Runtime, Cloud Run, GKE, CI/CD, secrets, service accounts). Community issue #48 proposes a deployment readiness contract layered on top of this skill, covering eval, approval, rollback, and observability gates.google-agents-cli-evaluate— eval dataset coverage, grading, failure analysis, and optimization traces; community issue #49 proposes an AISP eval quality contract to formalize these checks.
Additional phase skills cover scaffold, build, and publish, and follow the same folder convention.
Skill Anatomy and Conventions
Every skill follows the same on-disk layout, which keeps the host agent's loader uniform:
skills/<skill-name>/
SKILL.md # Required: loadable instructions + front-matter
references/ # Optional: Markdown docs the SKILL.md can cite
assets/ # Optional: templates, schemas, fixtures
examples/ # Optional: worked invocations and outputs
The SKILL.md file begins with a YAML front-matter block declaring the skill's name, a one-line description, the lifecycle phase it owns, and an ordered list of prerequisite skills. Following the front matter, the body is plain Markdown subdivided into *When to load*, *Inputs*, *Steps*, *Outputs*, and *Done when*. Phase skills keep all command syntax inline (or cite commands.md from the workflow skill) so that the host agent never has to read CLI source to recover an argument name.
Source: skills/README.md:1-50 Source: skills/google-agents-cli-workflow/SKILL.md:1-120 Source: skills/google-agents-cli-workflow/references/commands.md:1-80 Source: skills/google-agents-cli-workflow/references/terminology.md:1-60 Source: skills/google-agents-cli-workflow/references/spec-template.md:1-80 Source: skills/google-agents-cli-adk-code/SKILL.md:1-100
Source: https://github.com/google/agents-cli / Human Manual
Templates, Deployment Targets, and Known Issues
Related topics: CLI Commands and Agent Lifecycle, Agent Skills Reference
Continue reading this section for the full explanation and source context.
Related Pages
Related topics: CLI Commands and Agent Lifecycle, Agent Skills Reference
Templates, Deployment Targets, and Known Issues
Overview
agents-cli ships a curated set of project templates that are rendered by agents-cli scaffold create <project> --agent <template>. Each template is parameterized through a shared metadata file, agents-cli-manifest.yaml, which controls template-engine variables, the target agent directory layout, and the set of deployment artifacts that get emitted. Templates emit both application code (Python pyproject.toml, Dockerfile, agent entrypoints) and infrastructure-as-code (Terraform modules under deployment/terraform/), allowing a single scaffold command to produce a project that is ready for evaluation and deployment. Source: src/google/agents/cli/scaffold/base_templates/_shared/agents-cli-manifest.yaml
A deployment target selects which runtime the generated project will be built and pushed to. Targets influence the contents of the Dockerfile, the Terraform variables, and the CI/CD pipeline produced under deployment/terraform/cicd/. The current target surface includes Vertex AI Agent Engine (agent_runtime), Cloud Run, and GKE, with agent_runtime being the path used for ADK- and A2A-style agents generated from the adk and adk_a2a templates.
Template Manifest and Base Layout
The shared manifest is the contract between the scaffold command and every template in base_templates/. It declares template-level settings such as settings.agent_directory, which the scaffold engine substitutes into cookiecutter/Jinja-style paths when rendering. Because the manifest value is interpolated into filesystem paths during scaffolding, it must be treated as untrusted input when sourcing templates from remote Git repositories. Source: src/google/agents/cli/scaffold/base_templates/_shared/agents-cli-manifest.yaml
The Python base template provides the structural backbone used by all Python-language scaffolds (adk, adk_a2a, tool, sub_agent, RAG recipes). It establishes:
- A standard
pyproject.tomldefining the agent's runtime dependencies and entrypoint. - A
Dockerfileused for containerized deployment to Cloud Run, GKE, and Agent Engine. - A
deployment/terraform/tree split intocicd/(pipelines and telemetry) andshared/(reusable modules, BigQuery log schemas, and BigQuery analytics SQL).
Source: src/google/agents/cli/scaffold/base_templates/python/pyproject.toml · src/google/agents/cli/scaffold/base_templates/python/Dockerfile
Deployment Targets and IaC Surface
The Terraform surface emitted by the Python base template is organized into two subtrees. The cicd/ subtree contains pipeline definitions and an opinionated telemetry.tf module that wires Cloud Logging → BigQuery for GenAI traces. The shared/ subtree holds the canonical BigQuery schema for GenAI logs (genai_logs_schema.json) and an analytics view (completions.sql) used by evaluation and observability workflows. Source: src/google/agents/cli/scaffold/base_templates/python/deployment/terraform/cicd/telemetry.tf · src/google/agents/cli/scaffold/base_templates/python/deployment/terraform/shared/genai_logs_schema.json · src/google/agents/cli/scaffold/base_templates/python/deployment/terraform/shared/completions.sql
Each deployment target selects a subset of these modules and sets the variables that govern region, project, and service-account wiring. When --deployment-target agent_runtime is used, the scaffold produces a vertexai._genai.AgentEngine-oriented build path; for cloud_run, the same Python code is packaged into a Cloud Run service via the generated Dockerfile. Redeploys to either Agent Engine or Cloud Run preserve the existing deployment spec rather than resetting unspecified settings, which is the v1.0.0 behavior change.
The following table summarizes the matrix of common agent templates versus supported deployment targets.
| Template | agent_runtime | cloud_run | gke |
|---|---|---|---|
adk | ✓ | ✓ | ✓ |
adk_a2a | ✓ | ✓ | ✓ |
tool | ✓ | ✓ | ✓ |
sub_agent | ✓ | ✓ | ✓ |
rag-* | ✓ (recipe) | ✓ | ✓ |
Known Issues and Limitations
Several issues tracked in the repository affect how templates and deployment targets behave in practice. They are summarized here so that users picking a template/target combination can plan mitigations.
- Path traversal via remote templates (#50).
agents-cli scaffold create <project> --agent <remote-repo>clones the remote repository and rendersagents-cli-manifest.yamlwithout a confirmation prompt. A craftedsettings.agent_directoryvalue (e.g. one containing../) can cause files to be written outside the intended project directory. Until this is fixed upstream, prefer local templates or pin remote templates to trusted refs. adk_a2aagent_runtime region mismatch (#28). Agents generated from theadk_a2atemplate with--deployment-target agent_runtimestamp the A2A Agent Card'surlwithus-central1even when thereasoningEngines/<id>resource is created in a different region (e.g.us-east1). Workaround: set the Vertex location explicitly in the generated code before building.- Deploy Python version pinned to CLI interpreter (#36).
agents-cli deploy --deployment-target agent_runtimereadssys.version_infofrom the interpreter running the CLI rather than from the target project's Python. Dependencies without wheels for that interpreter version (e.g.litellmunder Python 3.14) will fail at build time. - Missing
agents-cli deploy --python-versionflag (#45). There is no explicit--python-versionoption onagents-cli deploy. Until one is added, users must align the CLI's interpreter with the project's target Python to avoid #36. - Windows console Unicode errors (#37).
agents-cli updateemits PythonUnicodeDecodeErrortracebacks when run on non-UTF-8 Windows consoles. Running from a UTF-8-aware terminal (orchcp 65001) mitigates the noise. infracommands default to apply (#4).agents-cli infraoperations runterraform applyrather thanterraform planby default. Pass an explicit dry-run/plan flag until safe-by-default is shipped.- A2A on agent_runtime: in-memory stores (#5).
adk-a2a-scaffolded agents default to in-memory session and task stores rather than a managed service, which limits durability on Agent Engine. - Java/TypeScript/Go ADK support (#9). Templates and skills currently target ADK-Python patterns; ADK-Java, TypeScript, and Go are not first-class.
- Setup friction on Windows (#21). Initial environment setup on Windows remains heavy (Python version management,
gcloudinstall, ADC auth, PATH tuning). A bundled GUI/desktop client has been proposed as an alternative onboarding path.
For upgrade planning, v1.0.0 (GA) is the current stable line: redeploys preserve existing deployment specs on Agent Engine and Cloud Run, Agent Engine deploys now honor .gcloudignore and .gitignore when packaging, and the RAG templates ship as clone-and-study recipes rather than interactive scaffolds.
Source: https://github.com/google/agents-cli / Human Manual
Doramagic Pitfall Log
Source-linked risks stay visible on the manual page so the preview does not read like a recommendation.
May increase setup, validation, or first-run risk for the user.
May increase setup, validation, or first-run risk for the user.
May increase setup, validation, or first-run risk for the user.
May increase setup, validation, or first-run risk for the user.
Doramagic Pitfall Log
Found 40 structured pitfall item(s), including 15 high/blocking item(s). Top priority: Installation risk - Installation risk requires verification.
1. Installation risk: Installation risk requires verification
- Severity: high
- Finding: Project evidence flags a installation risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/44
2. Installation risk: Installation risk requires verification
- Severity: high
- Finding: Project evidence flags a installation risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/42
3. Installation risk: Installation risk requires verification
- Severity: high
- Finding: Project evidence flags a installation risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/29
4. Installation risk: Installation risk requires verification
- Severity: high
- Finding: Project evidence flags a installation risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/9
5. Installation risk: Installation risk requires verification
- Severity: high
- Finding: Project evidence flags a installation risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/28
6. Installation risk: Installation risk requires verification
- Severity: high
- Finding: Project evidence flags a installation risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/39
7. Installation risk: Installation risk requires verification
- Severity: high
- Finding: Project evidence flags a installation risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/36
8. Configuration risk: Configuration risk requires verification
- Severity: high
- Finding: Project evidence flags a configuration risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/25
9. Configuration risk: Configuration risk requires verification
- Severity: high
- Finding: Project evidence flags a configuration risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/37
10. Security or permission risk: Security or permission risk requires verification
- Severity: high
- Finding: Developers should check this security_permissions risk before relying on the project: Add an optional AISP deployment readiness contract for eval, approval, deploy, rollback, and observability gates
- User impact: Developers may expose sensitive permissions or credentials: Add an optional AISP deployment readiness contract for eval, approval, deploy, rollback, and observability gates
- Recommended check: Before packaging this project, run the relevant install/config/quickstart check for: Add an optional AISP deployment readiness contract for eval, approval, deploy, rollback, and observability gates. Context: Observed when using python
- Evidence: failure_mode_cluster:github_issue | https://github.com/google/agents-cli/issues/48
11. Security or permission risk: Security or permission risk requires verification
- Severity: high
- Finding: Developers should check this security_permissions risk before relying on the project: Support Antigravity SDK as a first-class agent implementation framework
- User impact: Developers may expose sensitive permissions or credentials: Support Antigravity SDK as a first-class agent implementation framework
- Recommended check: Before packaging this project, run the relevant install/config/quickstart check for: Support Antigravity SDK as a first-class agent implementation framework. Context: Observed when using python
- Evidence: failure_mode_cluster:github_issue | https://github.com/google/agents-cli/issues/41
12. Security or permission risk: Security or permission risk requires verification
- Severity: high
- Finding: Project evidence flags a security or permission risk. Review the linked source before relying on this workflow.
- User impact: May increase setup, validation, or first-run risk for the user.
- Recommended check: Reproduce the official install and quickstart path in an isolated environment.
- Evidence: community_evidence:github | https://github.com/google/agents-cli/issues/21
Source: Doramagic discovery, validation, and Project Pack records
Community Discussion Evidence
These external discussion links are review inputs, not standalone proof that the project is production-ready.
Count of project-level external discussion links exposed on this manual page.
Open the linked issues or discussions before treating the pack as ready for your environment.
Community Discussion Evidence
Doramagic exposes project-level community discussion separately from official documentation. Review these links before using agents-cli with real data or production workflows.
- Support per-eval-case ADK session state in
agents-cli eval generate- github / github_issue - Add an optional AISP lifecycle contract for spec → scaffold → build → ev - github / github_issue
- Add a proactive "verify against official docs" step before code generati - github / github_issue
- Path traversal in remote-template scaffolding → arbitrary file write (ag - github / github_issue
- Python version option for agents-cli deploy - github / github_issue
- Add an optional AISP eval quality contract for dataset coverage, grading - github / github_issue
- Add an optional AISP deployment readiness contract for eval, approval, d - github / github_issue
- Provide a bundled GUI client or a standalone desktop app instead of rely - github / github_issue
adk_a2a(agent_runtime) scaffold does not set Vertex location before b - github / github_issue- agents-cli update floods console with Python UnicodeDecodeError tracebac - github / github_issue
- repo init with cicd, for a2a ,adk , tool, and sub agent init. - github / github_issue
- v0.5.0: deploy to agent_runtime builds on the CLI's own Python (sys.vers - github / github_issue
Source: Project Pack community evidence and pitfall evidence