The CLI and skills that turn any coding assistant into an expert at creating, evaluating, and deploying AI agents on Google Cloud.
This report summarizes scanner evidence for google/agents-cli, a Python project with 6,072 GitHub stars. SynthScan examined 84,989 lines of code across 424 source files, recording 985 pattern matches distributed across 21 syntactic categories. The legacy adjusted pattern signal is 18.4 (Elevated pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 623 finding(s).
Are imports declared and package/API names verified? 72 finding(s).
Are wrappers, guards, and repeated structures necessary? 465 finding(s).
Which changes need focused human review? 985 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 985 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/mkdocs.yml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | docs/pyproject.toml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | docs/hooks/skills_reference.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/tests/test_extension.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/tests/test_run.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/tests/test_eval_generate.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/tests/test_content.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/tests/test_publish.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/tests/test_telemetry.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/agents-cli-extension.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/app/fast_api_app.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/app/app_utils/a2a.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/app/app_utils/content.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …nsions/langchain/template/tests/load_test/load_test.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …angchain/template/tests/integration/test_server_e2e.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/scripts/run.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/scripts/unsupported.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/scripts/_content.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/scripts/eval_generate.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | extensions/langchain/template/scripts/publish.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …sions/langchain/template/.template/templateconfig.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .github/workflows/docs.yml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .github/ISSUE_TEMPLATE/feature_request.yml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .github/ISSUE_TEMPLATE/bug_report.yml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_output.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/auth.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_modes.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_agent_platform_types.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_telemetry.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_tools.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_adk_client.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_click.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_defaults.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_experiments.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_skills_check.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_gcp_project.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_remote.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_trust.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_telemetry_worker.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/main.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_runner.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_project.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/_agent_platform.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/infra/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/infra/_terraform.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/infra/cmd_datastore.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/infra/cmd_infra.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/infra/cmd_infra_show.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/infra/cmd_infra_single_project.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/extension/_schema.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/extension/_manifest.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/extension/_overrides.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/extension/_loader.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/extension/_refs.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/extension/_paths.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/extension/__init__.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | src/google/agents/cli/extension/cmd_extension_add.py | 1 | # Copyright 2026 Google LLC | COMMENT |
| 210 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/src/javascripts/lifecycle.js | 64 | // ── Lazy: only fire when the element scrolls into view ────────────────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 115 | // ─────────────────────────────────────────── 1. TRANSCRIPT ────────────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 207 | // ─────────────────────────────────────────── 2. LIFECYCLE LOOP ────────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 287 | // ─────────────────────────────────────────── 5b. FAILURE MUSEUM ───────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 350 | // ─────────────────────────────────────────── 3. SCAFFOLD WIZARD ───────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 472 | // ─────────────────────────────────────────── 4. TEAM DIAGRAM ──────────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 641 | // ─────────────────────────────────────────── 5. EVAL-FIX LOOP ─────────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 835 | // ─────────────────────────────────────────── 6. TRACE WATERFALL ───────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 984 | // ─────────────────────────────────────────── 7. MODEL COMPARE ─────────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 1050 | // ─────────────────────────────────────────── 8. INLINE PLAYGROUND ─────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 1129 | // ─────────────────────────────────────────── 9. DEPLOY TARGETS ────────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 1224 | // ─────────────────────────────────────────── 10. PUBLISH CARD ─────────── | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 1254 | // ─────────────────────────────────────────── 11. ROLLING EVAL ─────────── | COMMENT |
| MEDIUM | src/google/agents/cli/auth.py | 76 | # ── Google Cloud (ADC) ────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/auth.py | 217 | # ── Gemini API Key ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/auth.py | 256 | # ── Express Mode ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/auth.py | 377 | # ── Shared Helpers ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/auth.py | 442 | # ── Token Helpers ────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/_project.py | 306 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/_project.py | 308 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/eval/_paths.py | 53 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/eval/_paths.py | 55 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/eval/_paths.py | 59 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/eval/_paths.py | 61 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/eval/_paths.py | 69 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/eval/_paths.py | 71 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/eval/_paths.py | 78 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/eval/_paths.py | 80 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | src/google/agents/cli/eval/cmd_generate.py | 434 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | src/google/agents/cli/eval/cmd_generate.py | 436 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | src/google/agents/cli/run/_local_server.py | 216 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | src/google/agents/cli/run/_local_server.py | 218 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/merge.py | 573 | # ── Compare ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/merge.py | 583 | # ── Dependency merging ─────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/merge.py | 612 | # ── Display ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/merge.py | 626 | # ── Confirm ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/merge.py | 643 | # ── Pre-apply hook (e.g. backup) ───────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/merge.py | 648 | # ── Apply ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/merge.py | 679 | # ── Post-apply hook (e.g. metadata update) ─────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/merge.py | 683 | # ── Summary ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/language.py | 46 | # ============================================================================= | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/language.py | 48 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/scaffold/utils/template.py | 48 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/scaffold/utils/template.py | 50 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/scaffold/utils/template.py | 54 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/scaffold/utils/template.py | 95 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/scaffold/utils/template.py | 97 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | src/google/agents/cli/scaffold/utils/template.py | 104 | # ============================================================================= | COMMENT |
| MEDIUM | …es/go/deployment/terraform/single-project/telemetry.tf | 30 | # ==================================================================== | COMMENT |
| MEDIUM | …es/go/deployment/terraform/single-project/telemetry.tf | 32 | # ==================================================================== | COMMENT |
| MEDIUM | …es/go/deployment/terraform/single-project/telemetry.tf | 60 | # ==================================================================== | COMMENT |
| MEDIUM | …es/go/deployment/terraform/single-project/telemetry.tf | 62 | # ==================================================================== | COMMENT |
| MEDIUM | …es/go/deployment/terraform/single-project/telemetry.tf | 119 | # ==================================================================== | COMMENT |
| MEDIUM | …es/go/deployment/terraform/single-project/telemetry.tf | 121 | # ==================================================================== | COMMENT |
| MEDIUM | …se_templates/go/deployment/terraform/cicd/telemetry.tf | 31 | # ==================================================================== | COMMENT |
| MEDIUM | …se_templates/go/deployment/terraform/cicd/telemetry.tf | 33 | # ==================================================================== | COMMENT |
| MEDIUM | …se_templates/go/deployment/terraform/cicd/telemetry.tf | 63 | # ==================================================================== | COMMENT |
| MEDIUM | …se_templates/go/deployment/terraform/cicd/telemetry.tf | 65 | # ==================================================================== | COMMENT |
| MEDIUM | …se_templates/go/deployment/terraform/cicd/telemetry.tf | 124 | # ==================================================================== | COMMENT |
| MEDIUM | …se_templates/go/deployment/terraform/cicd/telemetry.tf | 126 | # ==================================================================== | COMMENT |
| 16 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | extensions/langchain/tests/test_extension.py | 45 | def test_builds_on_the_empty_base(self): | CODE |
| LOW⚡ | extensions/langchain/tests/test_extension.py | 59 | def test_overrides_the_framework_coupled_commands(self): | CODE |
| LOW⚡ | extensions/langchain/tests/test_extension.py | 67 | def test_refuses_the_adk_only_commands(self): | CODE |
| LOW | extensions/langchain/tests/test_extension.py | 80 | def test_every_refusal_explains_itself(self): | CODE |
| LOW | extensions/langchain/tests/test_extension.py | 94 | def test_every_script_it_points_at_ships_with_the_template(self): | CODE |
| LOW | extensions/langchain/tests/test_extension.py | 102 | def test_first_party_manifest_validates(self): | CODE |
| LOW⚡ | extensions/langchain/tests/test_extension.py | 146 | def test_it_carries_its_own_overrides(self, project): | CODE |
| LOW⚡ | extensions/langchain/tests/test_extension.py | 153 | def test_its_guide_replaces_the_adk_one(self, project): | CODE |
| LOW⚡ | extensions/langchain/tests/test_extension.py | 159 | def test_ships_no_adk_shaped_tests(self, project): | CODE |
| LOW | extensions/langchain/tests/test_extension.py | 174 | def test_it_is_not_installable_from_this_repo(self): | CODE |
| LOW⚡ | extensions/langchain/tests/test_run.py | 69 | def test_sends_the_single_message(self, mod, seen, monkeypatch): | CODE |
| LOW⚡ | extensions/langchain/tests/test_run.py | 73 | def test_extra_words_are_rejected_not_joined(self, mod, seen, monkeypatch): | CODE |
| LOW⚡ | extensions/langchain/tests/test_run.py | 80 | def test_no_message_is_a_usage_error(self, mod, monkeypatch): | CODE |
| LOW⚡ | extensions/langchain/tests/test_run.py | 88 | def test_remote_flags_are_refused_with_a_way_out( | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 47 | def test_appends_agent_reply_per_turn(self): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 72 | def test_turn_without_user_event_is_skipped(self): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 98 | def test_multiple_turns_each_get_reply(self): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 136 | def test_turns_get_index_and_id(self): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 162 | def test_output_parses_as_the_model_grade_reads(self): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 178 | def test_case_carries_the_final_response(self): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 186 | def test_prompt_shaped_case_gets_a_reply_turn(self): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 220 | def test_accepts_the_flags_the_builtin_takes(self, mod, tmp_path, argv, monkeypatch): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 231 | def test_url_is_refused_with_a_way_out(self, mod, tmp_path, capsys): | CODE |
| LOW | extensions/langchain/tests/test_eval_generate.py | 238 | def test_trailing_separator_names_a_directory_to_create( | CODE |
| LOW | extensions/langchain/tests/test_publish.py | 42 | def test_only_agent_runtime_is_refused(monkeypatch, tmp_path, capsys, target, refused): | CODE |
| LOW⚡ | extensions/langchain/tests/test_telemetry.py | 56 | def test_disabled_without_bucket(self, monkeypatch): | CODE |
| LOW⚡ | extensions/langchain/tests/test_telemetry.py | 64 | def test_disabled_when_capture_off(self, monkeypatch): | CODE |
| LOW⚡ | extensions/langchain/tests/test_telemetry.py | 71 | def test_enabled_sets_upload_contract(self, monkeypatch): | CODE |
| LOW | extensions/langchain/tests/test_telemetry.py | 111 | def test_off_skips_the_exporters(self, monkeypatch): | CODE |
| LOW | …ls/google-agents-cli-adk-code/references/adk-python.md | 632 | async def generate_memories_callback(callback_context: CallbackContext): | CODE |
| LOW | src/google/agents/cli/_adk_client.py | 168 | def _event_has_function_response(event: dict) -> bool: | CODE |
| LOW | src/google/agents/cli/_adk_client.py | 176 | def _event_has_answer_content(event: dict) -> bool: | CODE |
| LOW | src/google/agents/cli/_remote.py | 46 | def is_legacy_agent_runtime_url(url: str) -> bool: | CODE |
| LOW | src/google/agents/cli/_remote.py | 58 | def validate_agent_runtime_url(url: str) -> None: | CODE |
| LOW | src/google/agents/cli/_remote.py | 78 | def build_agent_runtime_passthrough_url(location: str, runtime_resource: str) -> str: | CODE |
| LOW | src/google/agents/cli/_remote.py | 101 | def build_agent_runtime_endpoints(location: str, runtime_resource: str) -> AgentEndpoints: | CODE |
| LOW | src/google/agents/cli/_remote.py | 122 | def parse_agent_runtime_service_url(service_url: str) -> tuple[str, str]: | CODE |
| LOW | src/google/agents/cli/main.py | 56 | def _print_is_project_moved_tip() -> None: | CODE |
| LOW | src/google/agents/cli/_project.py | 132 | def _read_project_config_from_manifest(manifest_path: Path) -> ProjectConfig: | CODE |
| LOW | src/google/agents/cli/_project.py | 141 | def _read_project_config_from_pyproject(pyproject_path: Path) -> ProjectConfig: | CODE |
| LOW | src/google/agents/cli/_project.py | 244 | def _find_legacy_project_root(start_dir: Path) -> Path | None: | CODE |
| LOW | src/google/agents/cli/_project.py | 345 | def require_deployment_target(cfg: ProjectConfig) -> None: | CODE |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 126 | def prompt_gh_cli_installation() -> None: | CODE |
| LOW⚡ | src/google/agents/cli/infra/cmd_cicd.py | 197 | def get_project_name_from_config() -> str | None: | CODE |
| LOW⚡ | src/google/agents/cli/infra/cmd_cicd.py | 212 | def detect_region_from_terraform_vars() -> str | None: | CODE |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 265 | def prompt_for_repository_details( | CODE |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 480 | def handle_github_authentication(interactive: bool = True) -> None: | CODE |
| LOW | src/google/agents/cli/infra/_terraform.py | 33 | def require_single_project_tf_dir() -> Path: | CODE |
| LOW | src/google/agents/cli/extension/_spec.py | 201 | def _warn_if_script_entrypoint(name: str, kind: str, first_token: str) -> None: | CODE |
| LOW | src/google/agents/cli/deploy/_cloud_validation.py | 68 | def validate_agent_runtime_deployment( | CODE |
| LOW | src/google/agents/cli/deploy/_cloud_validation.py | 492 | def _check_agent_runtime_secret_ids(*, project: str, secrets: str) -> CheckResult | None: | CODE |
| LOW | src/google/agents/cli/deploy/_operation.py | 503 | def read_remote_agent_runtime_id() -> str | None: | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 152 | def build_psc_interface_config( | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 203 | def print_agent_runtime_dry_run( | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 704 | def check_agent_runtime_operation( | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 773 | def list_agent_runtime_deployments(project: str, location: str) -> None: | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 875 | def _missing_dockerfile_error(cfg: ProjectConfig) -> str: | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 904 | def _require_gateway_ready_project(cfg: ProjectConfig) -> None: | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 915 | def _build_agent_gateway_config( | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 1113 | def _is_agent_identity_principal(effective_identity: str | None) -> bool: | CODE |
| 111 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …angchain/template/tests/integration/test_server_e2e.py | 99 | except RequestException: | CODE |
| HIGH | src/google/agents/cli/auth.py | 212 | except Exception: | CODE |
| HIGH | src/google/agents/cli/auth.py | 463 | except Exception: | CODE |
| HIGH | src/google/agents/cli/auth.py | 503 | except (AttributeError, requests.exceptions.HTTPError): | CODE |
| HIGH | src/google/agents/cli/_telemetry.py | 442 | except Exception: # pragma: no cover - defensive catch-all | CODE |
| HIGH | src/google/agents/cli/_adk_client.py | 362 | except ConnectionClosed: | CODE |
| HIGH | src/google/agents/cli/_skills_check.py | 187 | except OSError: | CODE |
| HIGH | src/google/agents/cli/_runner.py | 126 | except (io.UnsupportedOperation, AttributeError, OSError): | CODE |
| HIGH | src/google/agents/cli/_project.py | 255 | except Exception: | CODE |
| HIGH | src/google/agents/cli/infra/cmd_cicd.py | 207 | except Exception: | CODE |
| HIGH | src/google/agents/cli/extension/_resolver.py | 277 | except (OSError, RecursionError, UnicodeDecodeError, yaml.YAMLError): | CODE |
| HIGH | src/google/agents/cli/deploy/_operation.py | 192 | except (ValueError, TypeError): | CODE |
| HIGH | src/google/agents/cli/deploy/_operation.py | 92 | except OSError: | CODE |
| HIGH | src/google/agents/cli/deploy/_operation.py | 107 | except OSError: | CODE |
| HIGH | src/google/agents/cli/setup/cmd_setup.py | 77 | except OSError: | CODE |
| HIGH | src/google/agents/cli/setup/_antigravity.py | 114 | except OSError: | CODE |
| HIGH | src/google/agents/cli/setup/_antigravity.py | 130 | except (OSError, NotImplementedError): | CODE |
| HIGH | src/google/agents/cli/setup/_antigravity.py | 120 | except OSError: | CODE |
| HIGH | src/google/agents/cli/setup/_antigravity.py | 148 | except (OSError, subprocess.CalledProcessError): | CODE |
| HIGH | src/google/agents/cli/publish/cmd_publish.py | 1207 | except (json.JSONDecodeError, KeyError, FileNotFoundError): | CODE |
| HIGH | src/google/agents/cli/eval/cmd_optimize.py | 184 | except OSError: | CODE |
| HIGH | src/google/agents/cli/eval/cmd_optimize.py | 169 | except OSError: | CODE |
| HIGH | src/google/agents/cli/eval/cmd_optimize.py | 178 | except OSError: | CODE |
| HIGH | src/google/agents/cli/run/_local_server.py | 527 | except (json.JSONDecodeError, OSError): | CODE |
| HIGH | src/google/agents/cli/run/_local_server.py | 564 | except psutil.NoSuchProcess: | CODE |
| HIGH | src/google/agents/cli/scaffold/utils/version.py | 52 | except OSError: | CODE |
| HIGH | …oyment_targets/gke/python/tests/load_test/load_test.py | 112 | except json.JSONDecodeError: | CODE |
| HIGH | …gets/agent_runtime/python/tests/load_test/load_test.py | 132 | except json.JSONDecodeError: | CODE |
| HIGH | …nt_runtime/python/tests/integration/test_server_e2e.py | 104 | except RequestException: | CODE |
| HIGH | …yment_targets/none/python/tests/load_test/load_test.py | 112 | except json.JSONDecodeError: | CODE |
| HIGH | …_targets/cloud_run/python/tests/load_test/load_test.py | 112 | except json.JSONDecodeError: | CODE |
| HIGH | src/google/agents/cli/scaffold/commands/enhance.py | 384 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ions/langchain/template/tests/eval/response_quality.py | 0 | local llm-as-judge for `custom_response_quality` (see eval_config.yaml). | STRING |
| HIGH | …cli/scaffold/agents/adk/tests/eval/response_quality.py | 0 | local llm-as-judge for `custom_response_quality` (see eval_config.yaml). | STRING |
| HIGH | …ts/cli/scaffold/agents/adk_go/eval/response_quality.py | 0 | local llm-as-judge for `custom_response_quality` (see eval_config.yaml). | STRING |
| HIGH | …oyment_targets/gke/python/tests/load_test/load_test.py | 0 | simulates a user interacting with the chat stream api. | STRING |
| HIGH | …yment_targets/none/python/tests/load_test/load_test.py | 0 | simulates a user interacting with the chat stream api. | STRING |
| HIGH | …_targets/cloud_run/python/tests/load_test/load_test.py | 0 | simulates a user interacting with the chat stream api. | STRING |
| HIGH | …argets/gke/python/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …nt_runtime/python/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …rgets/none/python/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …/cloud_run/python/tests/integration/test_server_e2e.py | 0 | start the fastapi server using subprocess and log its output. | STRING |
| HIGH | …argets/gke/python/tests/integration/test_server_e2e.py | 0 | wait for the server to be ready (agent card requires the lifespan to run). | STRING |
| HIGH | …nt_runtime/python/tests/integration/test_server_e2e.py | 0 | wait for the server to be ready (agent card requires the lifespan to run). | STRING |
| HIGH | …rgets/none/python/tests/integration/test_server_e2e.py | 0 | wait for the server to be ready (agent card requires the lifespan to run). | STRING |
| HIGH | …/cloud_run/python/tests/integration/test_server_e2e.py | 0 | wait for the server to be ready (agent card requires the lifespan to run). | STRING |
| HIGH | …argets/gke/python/tests/integration/test_server_e2e.py | 0 | pytest fixture to start and stop the server for testing. | STRING |
| HIGH | …nt_runtime/python/tests/integration/test_server_e2e.py | 0 | pytest fixture to start and stop the server for testing. | STRING |
| HIGH | …rgets/none/python/tests/integration/test_server_e2e.py | 0 | pytest fixture to start and stop the server for testing. | STRING |
| HIGH | …/cloud_run/python/tests/integration/test_server_e2e.py | 0 | pytest fixture to start and stop the server for testing. | STRING |
| HIGH | …argets/gke/python/tests/integration/test_server_e2e.py | 0 | test the a2a route using the json-rpc streaming protocol. | STRING |
| HIGH | …nt_runtime/python/tests/integration/test_server_e2e.py | 0 | test the a2a route using the json-rpc streaming protocol. | STRING |
| HIGH | …rgets/none/python/tests/integration/test_server_e2e.py | 0 | test the a2a route using the json-rpc streaming protocol. | STRING |
| HIGH | …/cloud_run/python/tests/integration/test_server_e2e.py | 0 | test the a2a route using the json-rpc streaming protocol. | STRING |
| HIGH | …argets/gke/python/tests/integration/test_server_e2e.py | 0 | test that the a2a agent card is served at the well-known uri. | STRING |
| HIGH | …nt_runtime/python/tests/integration/test_server_e2e.py | 0 | test that the a2a agent card is served at the well-known uri. | STRING |
| HIGH | …rgets/none/python/tests/integration/test_server_e2e.py | 0 | test that the a2a agent card is served at the well-known uri. | STRING |
| HIGH | …/cloud_run/python/tests/integration/test_server_e2e.py | 0 | test that the a2a agent card is served at the well-known uri. | STRING |
| HIGH | …argets/gke/python/tests/integration/test_server_e2e.py | 0 | cleanup agent engine sessions created during tests. | STRING |
| HIGH | …rgets/none/python/tests/integration/test_server_e2e.py | 0 | cleanup agent engine sessions created during tests. | STRING |
| HIGH | …/cloud_run/python/tests/integration/test_server_e2e.py | 0 | cleanup agent engine sessions created during tests. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tensions/langchain/template/app/app_utils/telemetry.py | 58 | except Exception as e: # best-effort; unavailable off-GCP | CODE |
| LOW | …tensions/langchain/template/app/app_utils/telemetry.py | 98 | except Exception as e: # pragma: no cover - optional dependency | CODE |
| LOW | …tensions/langchain/template/app/app_utils/telemetry.py | 104 | except Exception as e: # pragma: no cover - optional dependency | CODE |
| LOW | …tensions/langchain/template/app/app_utils/telemetry.py | 136 | except Exception as e: # no GCP creds (local dev): keep instrumentation | CODE |
| LOW | extensions/langchain/template/scripts/eval_generate.py | 61 | except Exception as e: | CODE |
| LOW | …google-agents-cli-deploy/references/batch-inference.md | 53 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/auth.py | 186 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/auth.py | 212 | except Exception: | CODE |
| LOW | src/google/agents/cli/auth.py | 354 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/auth.py | 427 | except Exception: | CODE |
| LOW | src/google/agents/cli/auth.py | 438 | except Exception: | CODE |
| LOW | src/google/agents/cli/auth.py | 463 | except Exception: | CODE |
| LOW | src/google/agents/cli/auth.py | 473 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/_telemetry.py | 347 | except Exception: | CODE |
| LOW | src/google/agents/cli/_telemetry.py | 364 | except Exception: | CODE |
| LOW | src/google/agents/cli/_telemetry.py | 374 | except Exception: | CODE |
| LOW | src/google/agents/cli/_telemetry.py | 442 | except Exception: # pragma: no cover - defensive catch-all | CODE |
| LOW | src/google/agents/cli/_tools.py | 182 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/_click.py | 198 | except Exception: | CODE |
| LOW | src/google/agents/cli/_experiments.py | 67 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/_skills_check.py | 104 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/_skills_check.py | 155 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/_remote.py | 172 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/main.py | 177 | except Exception as e: # import failure shouldn't crash extension application | CODE |
| LOW | src/google/agents/cli/main.py | 335 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/_project.py | 255 | except Exception: | CODE |
| LOW⚡ | src/google/agents/cli/_project.py | 301 | except Exception as e: | CODE |
| LOW⚡ | src/google/agents/cli/infra/cmd_cicd.py | 207 | except Exception: | CODE |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 235 | except Exception: | CODE |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 687 | except Exception as e: | STRING |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 262 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 346 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 476 | except Exception: | CODE |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 530 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 575 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/deploy/_cloud_validation.py | 233 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/deploy/_cloud_validation.py | 274 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/deploy/_cloud_validation.py | 453 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 1391 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/setup/cmd_setup.py | 227 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 204 | except Exception as auth_err: | CODE |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 230 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 383 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 473 | except Exception as e: | CODE |
| LOW⚡ | src/google/agents/cli/publish/cmd_publish.py | 1390 | except Exception as e: | STRING |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 1475 | except Exception as e: | STRING |
| LOW | src/google/agents/cli/dev/cmd_install.py | 127 | except Exception as e: | CODE |
| LOW | …google-agents-cli-deploy/references/batch-inference.md | 53 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/eval/cmd_grade.py | 74 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/eval/cmd_grade.py | 187 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/eval/cmd_grade.py | 265 | except Exception as e: | CODE |
| LOW | src/google/agents/cli/eval/_live.py | 239 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/eval/_live.py | 255 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/eval/_live.py | 293 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/eval/cmd_generate.py | 188 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/eval/cmd_generate.py | 199 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/eval/cmd_generate.py | 215 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/eval/cmd_generate.py | 225 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/eval/cmd_generate.py | 241 | except Exception as exc: | CODE |
| LOW | src/google/agents/cli/eval/cmd_generate.py | 315 | except Exception as exc: | CODE |
| 71 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/src/guide/lifecycle.md | 41 | | 1 | **Scaffold** | Turn the spec into a production-shaped project (~72 files). | `scaffold create` | `google-agents-cl | CODE |
| MEDIUM | docs/src/guide/lifecycle.md | 129 | When the team needs to span processes — or call agents your team doesn't own — use the **[A2A protocol](https://a2a-prot | CODE |
| MEDIUM | docs/src/guide/lifecycle.md | 214 | # Phase 1: scaffold | COMMENT |
| MEDIUM | docs/src/guide/lifecycle.md | 222 | # Phase 2-3: build & orchestrate (edit app/agent.py) | COMMENT |
| MEDIUM | docs/src/javascripts/lifecycle.js | 27 | * #lifecycle-anim-scaffold Interactive scaffold wizard | COMMENT |
| MEDIUM | docs/src/reference/skills.md | 42 | ## `google-agents-cli-scaffold` | COMMENT |
| MEDIUM⚡ | extensions/langchain/tests/test_extension.py | 64 | # scaffold.* belongs to the CLI now: the template is the scaffold. | COMMENT |
| MEDIUM | skills/google-agents-cli-scaffold/SKILL.md | 104 | agents-cli scaffold upgrade --force # Overwrite scaffolding files when smart-merge fails | CODE |
| MEDIUM | skills/google-agents-cli-scaffold/references/flags.md | 3 | ## `agents-cli scaffold create` Flags | COMMENT |
| MEDIUM | skills/google-agents-cli-scaffold/references/flags.md | 30 | ## `agents-cli scaffold enhance` Flags | COMMENT |
| MEDIUM | skills/google-agents-cli-deploy/references/gke.md | 41 | > **ADK projects.** The session wiring below (`shared://session`, `app_utils/services.py`) is ADK scaffold behavior. The | CODE |
| MEDIUM | skills/google-agents-cli-deploy/references/cloud-run.md | 29 | > **ADK projects.** The session wiring below (`shared://session`, `app_utils/services.py`) is ADK scaffold behavior. The | CODE |
| MEDIUM | …ls/google-agents-cli-adk-code/references/adk-python.md | 49 | description="Provides weather information.", # Important for multi-agent delegation | CODE |
| MEDIUM | …ls/google-agents-cli-adk-code/references/adk-python.md | 779 | # Prefer scaffolding over manual code — scaffold a normal `adk` agent; A2A is built in (see /google-agents-cli-scaffold) | COMMENT |
| MEDIUM | …ls/google-agents-cli-adk-code/references/adk-python.md | 804 | manager = A2uiSchemaManager(...) # loads catalog(s) + few-shot examples | CODE |
| MEDIUM | …gle-agents-cli-adk-code/references/adk-go-workflows.md | 296 | ### (c) Dynamic nodes — orchestrate in Go | COMMENT |
| MEDIUM | src/google/agents/cli/_click.py | 28 | # (root -> leaf, e.g. ``["scaffold", "create"]``). ``ctx.meta`` is shared across | COMMENT |
| MEDIUM | src/google/agents/cli/infra/_terraform.py | 27 | # Where the scaffold puts the single-project Terraform root, relative to the | COMMENT |
| MEDIUM | src/google/agents/cli/extension/_loader.py | 64 | # to the built-in would silently do something else (an ADK scaffold in a | COMMENT |
| MEDIUM | src/google/agents/cli/extension/_refs.py | 27 | # a template repo (scaffold/utils/remote_template.py), plus ssh://, which is how | COMMENT |
| MEDIUM | src/google/agents/cli/deploy/_utils.py | 46 | # agent-specific, so 8 keeps a RAG/large-context agent inside 4Gi. Lighter agents | COMMENT |
| MEDIUM | …ts/cli/skills/data/google-agents-cli-scaffold/SKILL.md | 104 | agents-cli scaffold upgrade --force # Overwrite scaffolding files when smart-merge fails | CODE |
| MEDIUM | …ls/data/google-agents-cli-scaffold/references/flags.md | 3 | ## `agents-cli scaffold create` Flags | COMMENT |
| MEDIUM | …ls/data/google-agents-cli-scaffold/references/flags.md | 30 | ## `agents-cli scaffold enhance` Flags | COMMENT |
| MEDIUM | …skills/data/google-agents-cli-deploy/references/gke.md | 41 | > **ADK projects.** The session wiring below (`shared://session`, `app_utils/services.py`) is ADK scaffold behavior. The | CODE |
| MEDIUM | …/data/google-agents-cli-deploy/references/cloud-run.md | 29 | > **ADK projects.** The session wiring below (`shared://session`, `app_utils/services.py`) is ADK scaffold behavior. The | CODE |
| MEDIUM | …ta/google-agents-cli-adk-code/references/adk-python.md | 49 | description="Provides weather information.", # Important for multi-agent delegation | CODE |
| MEDIUM | …ta/google-agents-cli-adk-code/references/adk-python.md | 779 | # Prefer scaffolding over manual code — scaffold a normal `adk` agent; A2A is built in (see /google-agents-cli-scaffold) | COMMENT |
| MEDIUM | …ta/google-agents-cli-adk-code/references/adk-python.md | 804 | manager = A2uiSchemaManager(...) # loads catalog(s) + few-shot examples | CODE |
| MEDIUM | …gle-agents-cli-adk-code/references/adk-go-workflows.md | 296 | ### (c) Dynamic nodes — orchestrate in Go | COMMENT |
| MEDIUM | …agents/cli/scaffold/agents/adk_go/sessions/sessions.go | 37 | // sessionType is the backend selected at scaffold time. | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/upgrade.py | 78 | # Everything else is "scaffolding" (3-way compare) | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/commands/create.py | 260 | # `scaffold enhance` and `scaffold upgrade`, so nothing it says is addressed | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/commands/enhance.py | 168 | # `framework` is recorded by whoever owns `scaffold create`; it is not a | COMMENT |
| MEDIUM | src/google/agents/cli/data/_recipe.py | 17 | # RAG moved out of the built-in templates into clone-and-study samples. Datastore | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | extensions/langchain/tests/test_extension.py | 21 | CODE | |
| LOW | extensions/langchain/tests/test_run.py | 17 | CODE | |
| LOW | extensions/langchain/tests/test_content.py | 21 | CODE | |
| LOW | extensions/langchain/tests/test_publish.py | 17 | CODE | |
| LOW | extensions/langchain/template/app/__init__.py | 3 | CODE | |
| LOW | extensions/langchain/template/app/fast_api_app.py | 28 | CODE | |
| LOW | extensions/langchain/template/app/app_utils/a2a.py | 20 | CODE | |
| LOW | …tensions/langchain/template/app/app_utils/telemetry.py | 9 | CODE | |
| LOW | extensions/langchain/template/app/app_utils/content.py | 17 | CODE | |
| LOW | extensions/langchain/template/scripts/run.py | 23 | CODE | |
| LOW | extensions/langchain/template/scripts/unsupported.py | 22 | CODE | |
| LOW | extensions/langchain/template/scripts/_content.py | 18 | CODE | |
| LOW | extensions/langchain/template/scripts/eval_generate.py | 21 | CODE | |
| LOW | extensions/langchain/template/scripts/publish.py | 22 | CODE | |
| LOW | src/google/agents/cli/_agent_platform_types.py | 27 | CODE | |
| LOW | src/google/agents/cli/_agent_platform_types.py | 29 | CODE | |
| LOW | src/google/agents/cli/_telemetry.py | 42 | CODE | |
| LOW | src/google/agents/cli/_adk_client.py | 17 | CODE | |
| LOW | src/google/agents/cli/_click.py | 17 | CODE | |
| LOW | src/google/agents/cli/_defaults.py | 17 | CODE | |
| LOW | src/google/agents/cli/_skills_check.py | 17 | CODE | |
| LOW | src/google/agents/cli/_remote.py | 21 | CODE | |
| LOW | src/google/agents/cli/_telemetry_worker.py | 21 | CODE | |
| LOW | src/google/agents/cli/main.py | 22 | CODE | |
| LOW | src/google/agents/cli/_project.py | 17 | CODE | |
| LOW | src/google/agents/cli/_agent_platform.py | 17 | CODE | |
| LOW | src/google/agents/cli/infra/_terraform.py | 17 | CODE | |
| LOW | src/google/agents/cli/infra/cmd_infra_show.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_schema.py | 20 | CODE | |
| LOW | src/google/agents/cli/extension/_manifest.py | 23 | CODE | |
| LOW | src/google/agents/cli/extension/_overrides.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_loader.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_refs.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_paths.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/cmd_extension_add.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/cmd_extension_remove.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_spec.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_resolver.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/cmd_extension_list.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_trust.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_compat.py | 21 | CODE | |
| LOW | src/google/agents/cli/extension/cmd_extension_update.py | 17 | CODE | |
| LOW | src/google/agents/cli/extension/_sync.py | 17 | CODE | |
| LOW | src/google/agents/cli/deploy/_cloud_validation.py | 17 | CODE | |
| LOW | src/google/agents/cli/deploy/_operation.py | 32 | CODE | |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 21 | CODE | |
| LOW | src/google/agents/cli/deploy/_utils.py | 17 | CODE | |
| LOW | src/google/agents/cli/setup/_antigravity.py | 34 | CODE | |
| LOW | src/google/agents/cli/info/cmd_info.py | 17 | CODE | |
| LOW | src/google/agents/cli/skills/_bundle.py | 26 | CODE | |
| LOW | src/google/agents/cli/eval/_live.py | 19 | CODE | |
| LOW | src/google/agents/cli/eval/_paths.py | 47 | CODE | |
| LOW | src/google/agents/cli/eval/cmd_generate.py | 17 | CODE | |
| LOW | src/google/agents/cli/eval/cmd_dataset.py | 17 | CODE | |
| LOW | src/google/agents/cli/eval/_events.py | 17 | CODE | |
| LOW | src/google/agents/cli/eval/cmd_analyze.py | 17 | CODE | |
| LOW | src/google/agents/cli/eval/cmd_run.py | 17 | CODE | |
| LOW | src/google/agents/cli/run/_local_server.py | 17 | CODE | |
| LOW | src/google/agents/cli/run/_a2a_pinning.py | 36 | CODE | |
| LOW | src/google/agents/cli/run/cmd_run.py | 17 | CODE | |
| 3 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/google/agents/cli/_runner.py | 253 | Wrapper around subprocess.run with optional executable resolution. Args: args: Command and arguments as a l | STRING |
| HIGH | src/google/agents/cli/_runner.py | 286 | Wrapper around subprocess.Popen with optional executable resolution. Args: args: Command and arguments as a | STRING |
| HIGH | src/google/agents/cli/_runner.py | 319 | Wrapper around subprocess.Popen for launching detached background processes. Handles cross-platform differences for | STRING |
| HIGH | src/google/agents/cli/publish/cmd_publish.py | 64 | Get the appropriate Discovery Engine API endpoint for the given location. Args: location: The location/regi | STRING |
| HIGH | src/google/agents/cli/publish/cmd_publish.py | 774 | Register an A2A agent to Gemini Enterprise, updating in place if it exists. Looks up an existing registration for t | STRING |
| HIGH | src/google/agents/cli/publish/cmd_publish.py | 859 | Register an agent engine to Gemini Enterprise, updating in place if it exists. Looks up an existing registration fo | STRING |
| HIGH | src/google/agents/cli/scaffold/utils/backup.py | 37 | Create a backup of the project directory. Backs up to ~/.agents-cli/backups/<project-name>_<timestamp>/. Args: | STRING |
| HIGH | src/google/agents/cli/scaffold/utils/merge.py | 497 | Shared 3-way merge pipeline used by both *upgrade* and *enhance*. Generates old and new template snapshots, compare | STRING |
| HIGH | src/google/agents/cli/scaffold/utils/symlinks.py | 58 | Resolve a template symlink and verify it is safe to materialize. A symlink is safe only when its fully-resolved tar | STRING |
| HIGH | src/google/agents/cli/scaffold/utils/language.py | 126 | Return the handler for ``language``, or raise a clear error. A ``None`` entry (or a missing key) means the command | STRING |
| HIGH | src/google/agents/cli/scaffold/utils/gcp.py | 181 | Verify credentials and Vertex AI connection. Uses google.auth + requests for lightweight verification. Args: | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | extensions/langchain/template/app/app_utils/a2a.py | 69 | CODE | |
| LOW | extensions/langchain/template/app/app_utils/content.py | 20 | CODE | |
| LOW | extensions/langchain/template/scripts/eval_generate.py | 71 | CODE | |
| LOW | src/google/agents/cli/_adk_client.py | 277 | CODE | |
| LOW | src/google/agents/cli/_runner.py | 55 | CODE | |
| LOW | src/google/agents/cli/_project.py | 244 | CODE | |
| LOW | src/google/agents/cli/_project.py | 278 | CODE | |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 72 | CODE | |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 482 | CODE | |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 105 | CODE | |
| LOW | src/google/agents/cli/extension/_resolver.py | 166 | CODE | |
| LOW | src/google/agents/cli/extension/cmd_extension_update.py | 59 | CODE | |
| LOW | src/google/agents/cli/extension/_sync.py | 49 | CODE | |
| LOW | src/google/agents/cli/deploy/_cloud_validation.py | 256 | CODE | |
| LOW | src/google/agents/cli/deploy/_operation.py | 382 | CODE | |
| LOW | src/google/agents/cli/deploy/_operation.py | 446 | CODE | |
| LOW | src/google/agents/cli/deploy/_operation.py | 239 | CODE | |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 257 | CODE | |
| LOW | src/google/agents/cli/setup/cmd_setup.py | 281 | CODE | |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 238 | CODE | |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 481 | CODE | |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 1165 | CODE | |
| LOW | src/google/agents/cli/eval/optimize_utils.py | 26 | CODE | |
| LOW | src/google/agents/cli/eval/cmd_grade.py | 57 | CODE | |
| LOW | src/google/agents/cli/eval/cmd_optimize.py | 45 | CODE | |
| LOW | src/google/agents/cli/eval/cmd_optimize.py | 121 | CODE | |
| LOW | src/google/agents/cli/eval/cmd_submit.py | 157 | CODE | |
| LOW | src/google/agents/cli/eval/_synthesize_runner.py | 133 | CODE | |
| LOW | src/google/agents/cli/eval/eval_utils.py | 296 | CODE | |
| LOW | src/google/agents/cli/run/_local_server.py | 67 | CODE | |
| LOW | src/google/agents/cli/run/_local_server.py | 419 | CODE | |
| LOW | src/google/agents/cli/run/_local_server.py | 554 | CODE | |
| LOW | src/google/agents/cli/run/_a2a_pinning.py | 110 | CODE | |
| LOW | src/google/agents/cli/run/cmd_run.py | 411 | CODE | |
| LOW | src/google/agents/cli/run/cmd_run.py | 1095 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/merge.py | 272 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/merge.py | 294 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/merge.py | 401 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/remote_template.py | 421 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/remote_template.py | 705 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/upgrade.py | 365 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 132 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 182 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 454 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 768 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 955 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 1001 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/gcp.py | 94 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/gcp.py | 177 | CODE | |
| LOW | …oyment_targets/gke/python/tests/load_test/load_test.py | 38 | CODE | |
| LOW | …gets/agent_runtime/python/tests/load_test/load_test.py | 55 | CODE | |
| LOW | …yment_targets/none/python/tests/load_test/load_test.py | 38 | CODE | |
| LOW | …_targets/cloud_run/python/tests/load_test/load_test.py | 38 | CODE | |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 938 | CODE | |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 1049 | CODE | |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 1287 | CODE | |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 1337 | CODE | |
| LOW | src/google/agents/cli/scaffold/commands/enhance.py | 89 | CODE | |
| LOW | src/google/agents/cli/scaffold/commands/enhance.py | 467 | CODE | |
| LOW | src/google/agents/cli/scaffold/commands/enhance.py | 582 | CODE | |
| 2 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skills/google-agents-cli-scaffold/SKILL.md | 36 | ## Step 1: Choose Architecture | COMMENT |
| LOW | skills/google-agents-cli-scaffold/SKILL.md | 62 | ## Step 2: Create or Enhance the Project | COMMENT |
| LOW⚡ | skills/google-agents-cli-scaffold/SKILL.md | 165 | # Step 1: Create a prototype | COMMENT |
| LOW⚡ | skills/google-agents-cli-scaffold/SKILL.md | 168 | # Step 2: Iterate on the agent code... | COMMENT |
| LOW⚡ | skills/google-agents-cli-scaffold/SKILL.md | 170 | # Step 3: Add deployment when ready | COMMENT |
| LOW⚡ | skills/google-agents-cli-scaffold/SKILL.md | 180 | ## Step 3: Load Dev Workflow | COMMENT |
| LOW | …gents-cli-deploy/references/testing-deployed-agents.md | 84 | # Step 1: Create a session (required before sending messages) | COMMENT |
| LOW | …gents-cli-deploy/references/testing-deployed-agents.md | 91 | # Step 2: Send a message via SSE streaming | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 117 | # Step 1: Targeted Terraform (local dev only) | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 138 | # Step 2: Get cluster credentials | COMMENT |
| LOW⚡ | src/google/agents/cli/deploy/gke.py | 155 | # Step 3: Build and push container image (local dev only) | COMMENT |
| LOW⚡ | src/google/agents/cli/deploy/gke.py | 161 | # Step 4: Update container image | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 176 | # Step 5: Inject runtime env vars (AGENT_VERSION, --update-env-vars, APP_URL). | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 234 | # Step 6: Wait for rollout | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 252 | # Step 7: Print summary | COMMENT |
| LOW⚡ | src/google/agents/cli/publish/cmd_publish.py | 1395 | # Step 1: Get Agent Runtime ID | STRING |
| LOW⚡ | src/google/agents/cli/publish/cmd_publish.py | 1447 | # Step 3: Get display name and description | STRING |
| LOW⚡ | src/google/agents/cli/publish/cmd_publish.py | 1456 | # Step 4: Register as ADK agent | STRING |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 1426 | # Step 2: Get Gemini Enterprise App ID | STRING |
| LOW | …ts/cli/skills/data/google-agents-cli-scaffold/SKILL.md | 36 | ## Step 1: Choose Architecture | COMMENT |
| LOW | …ts/cli/skills/data/google-agents-cli-scaffold/SKILL.md | 62 | ## Step 2: Create or Enhance the Project | COMMENT |
| LOW⚡ | …ts/cli/skills/data/google-agents-cli-scaffold/SKILL.md | 165 | # Step 1: Create a prototype | COMMENT |
| LOW⚡ | …ts/cli/skills/data/google-agents-cli-scaffold/SKILL.md | 168 | # Step 2: Iterate on the agent code... | COMMENT |
| LOW⚡ | …ts/cli/skills/data/google-agents-cli-scaffold/SKILL.md | 170 | # Step 3: Add deployment when ready | COMMENT |
| LOW⚡ | …ts/cli/skills/data/google-agents-cli-scaffold/SKILL.md | 180 | ## Step 3: Load Dev Workflow | COMMENT |
| LOW | …gents-cli-deploy/references/testing-deployed-agents.md | 84 | # Step 1: Create a session (required before sending messages) | COMMENT |
| LOW | …gents-cli-deploy/references/testing-deployed-agents.md | 91 | # Step 2: Send a message via SSE streaming | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/google/agents/cli/auth.py | 123 | # Check if gcloud is installed | COMMENT |
| LOW | src/google/agents/cli/auth.py | 310 | # Check if already authenticated | COMMENT |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 360 | # Check if the secret exists first | STRING |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 559 | # Check if Terraform structure exists (prototype projects may lack it) | STRING |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 607 | # Check if GitHub CLI has required scopes for the CI/CD runner | STRING |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 328 | # Check if API is enabled | COMMENT |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 414 | # Display output if captured | COMMENT |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 542 | # Check if repo exists | COMMENT |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 620 | # Check if bucket exists globally | COMMENT |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 437 | # Set it to true if an agent without Agent Identity is being re-deployed | COMMENT |
| LOW | src/google/agents/cli/scaffold/utils/remote_template.py | 116 | # Check if this is the ADK samples repository | COMMENT |
| LOW | src/google/agents/cli/scaffold/utils/remote_template.py | 135 | # Check if this is the ADK samples repository | COMMENT |
| LOW | src/google/agents/cli/scaffold/utils/remote_template.py | 237 | # Check if the error is related to branch not found (indicates it's likely a tag) | COMMENT |
| LOW | src/google/agents/cli/scaffold/utils/remote_template.py | 319 | # Check if agent.py exists in root | COMMENT |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 902 | # Check if agent.py already exists and has root_agent defined | COMMENT |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 1458 | # Check if this is a flat structure template | STRING |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 374 | # Check if directory already exists | COMMENT |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 510 | # Check if project would exist in output directory | COMMENT |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 608 | # Check if it's a remote template specification | COMMENT |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 1539 | # Check if running in Cloud Shell with no project | COMMENT |
| LOW | src/google/agents/cli/scaffold/commands/enhance.py | 522 | # Check if this directory might contain agent code | COMMENT |
| LOW | src/google/agents/cli/scaffold/commands/upgrade.py | 346 | # Check if upgrade is needed | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | skills/google-agents-cli-deploy/SKILL.md | 257 | echo -n "YOUR_API_KEY" | gcloud secrets create MY_SECRET_NAME --data-file=- | CODE |
| HIGH | src/google/agents/cli/auth.py | 56 | click.secho(f' export {var_name}="YOUR_API_KEY"', bold=True) | CODE |
| HIGH | …ents/cli/skills/data/google-agents-cli-deploy/SKILL.md | 257 | echo -n "YOUR_API_KEY" | gcloud secrets create MY_SECRET_NAME --data-file=- | CODE |
| HIGH | src/google/agents/cli/scaffold/agents/adk_ts/README.md | 60 | # GEMINI_API_KEY=your-api-key | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | extensions/langchain/template/app/__init__.py | 5 | __all__ = ["root_agent"] | CODE |
| LOW | …tensions/langchain/template/app/app_utils/telemetry.py | 63 | def _setup_cloud_exporters() -> None: | CODE |
| LOW | …nsions/langchain/template/tests/load_test/load_test.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | …angchain/template/tests/integration/test_server_e2e.py | 47 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/google/agents/cli/_agent_platform_types.py | 31 | __all__ = ["types"] | CODE |
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 240 | def update_build_triggers(tf_dir: Path) -> None: | CODE |
| LOW | src/google/agents/cli/infra/_cicd_utils.py | 686 | def update_terraform_vars(self, project_dir: Path, is_dev: bool = False) -> None: | CODE |
| LOW | src/google/agents/cli/eval/cmd_analyze.py | 40 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/google/agents/cli/run/_local_server.py | 520 | def _update_activity(project_root: Path) -> None: | CODE |
| LOW | …/google/agents/cli/scaffold/agents/adk/app/__init__.py | 17 | __all__ = ["app"] | CODE |
| LOW | …oyment_targets/gke/python/tests/load_test/load_test.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …argets/gke/python/tests/integration/test_server_e2e.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | …gets/agent_runtime/python/tests/load_test/load_test.py | 45 | logger = logging.getLogger(__name__) | CODE |
| LOW | …nt_runtime/python/tests/integration/test_server_e2e.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | …yment_targets/none/python/tests/load_test/load_test.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …rgets/none/python/tests/integration/test_server_e2e.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | …_targets/cloud_run/python/tests/load_test/load_test.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/cloud_run/python/tests/integration/test_server_e2e.py | 43 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 42 | __all__ = ["create"] | CODE |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 1592 | def set_gcp_project(project_id: str, set_quota_project: bool = True) -> None: | CODE |
| LOW | src/google/agents/cli/scaffold/commands/enhance.py | 739 | def _update_metadata(proj_dir: pathlib.Path, lang: str) -> None: | CODE |
| LOW | src/google/agents/cli/scaffold/commands/upgrade.py | 377 | def _update_version(proj_dir: pathlib.Path, lang: str) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/google/agents/cli/_runner.py | 275 | # Create a shallow copy to avoid modifying the original list passed by reference | COMMENT |
| MEDIUM | src/google/agents/cli/_runner.py | 308 | # Create a shallow copy to avoid modifying the original list passed by reference | COMMENT |
| MEDIUM | src/google/agents/cli/infra/_cicd_utils.py | 153 | # Create a CompletedProcess-like object for compatibility | COMMENT |
| MEDIUM | src/google/agents/cli/infra/_cicd_utils.py | 679 | # Create a meaningful default project name based on agent and deployment target | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/utils/template.py | 1143 | # Create a new temporary directory and use it as our working directory | STRING |
| MEDIUM | src/google/agents/cli/scaffold/utils/template.py | 1158 | # Create the cookiecutter template structure | STRING |
| MEDIUM | …_templates/_shared/deployment/terraform/cicd/github.tf | 223 | # Create the GitHub connection (fallback for manual Terraform usage) | COMMENT |
| MEDIUM | src/google/agents/cli/scaffold/commands/enhance.py | 433 | # Create a mapping of choices to agent names | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/google/agents/cli/deploy/gke.py | 117 | # Step 1: Targeted Terraform (local dev only) | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 138 | # Step 2: Get cluster credentials | COMMENT |
| LOW⚡ | src/google/agents/cli/deploy/gke.py | 155 | # Step 3: Build and push container image (local dev only) | COMMENT |
| LOW⚡ | src/google/agents/cli/deploy/gke.py | 161 | # Step 4: Update container image | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 176 | # Step 5: Inject runtime env vars (AGENT_VERSION, --update-env-vars, APP_URL). | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 234 | # Step 6: Wait for rollout | COMMENT |
| LOW | src/google/agents/cli/deploy/gke.py | 252 | # Step 7: Print summary | COMMENT |
| LOW⚡ | src/google/agents/cli/publish/cmd_publish.py | 1395 | # Step 1: Get Agent Runtime ID | STRING |
| LOW⚡ | src/google/agents/cli/publish/cmd_publish.py | 1447 | # Step 3: Get display name and description | STRING |
| LOW⚡ | src/google/agents/cli/publish/cmd_publish.py | 1456 | # Step 4: Register as ADK agent | STRING |
| LOW | src/google/agents/cli/publish/cmd_publish.py | 1426 | # Step 2: Get Gemini Enterprise App ID | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/google/agents/cli/extension/_schema.py | 56 | """Let any optional property be null, matching how the loader reads YAML. | STRING |
| HIGH | src/google/agents/cli/extension/_overrides.py | 101 | return f"set {DISABLE_OVERRIDES_ENV}=1 && agents-cli {display_path}" | CODE |
| HIGH | src/google/agents/cli/scaffold/commands/create.py | 1837 | f" [bold bright_green]cd {cd_path} && agents-cli install && agents-cli playground[/]" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/google/agents/cli/_runner.py | 55 | CODE | |
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 257 | CODE | |
| LOW | src/google/agents/cli/scaffold/utils/template.py | 1001 | CODE | |
| LOW | src/google/agents/cli/scaffold/commands/create.py | 199 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …oogle-agents-cli-eval/references/builtin-tools-eval.md | 144 | if not api_key or api_key == "dummy_key": | CODE |
| LOW | …oogle-agents-cli-eval/references/builtin-tools-eval.md | 144 | if not api_key or api_key == "dummy_key": | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/google/agents/cli/deploy/agent_runtime.py | 1168 | # so we can just use object.__new__ to create a dummy instance. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/google/agents/cli/infra/cmd_cicd.py | 176 | "\n💡 Tip: Don't forget to commit and push your changes to the repository!" | CODE |