Publishing skill for the Google agents-cli suite (SKILL.md signed by Google): Registers deployed agents with the Gemini app (formerly Gemini Enterprise) and uses gcloud to manage agents and MCP servers in the Agent Registry.
skills.sh install count 516262 (+2918 / 24h)
Security Audit: Risk warnings present
- Installs or runs third-party packages (npx / pip, etc.), which involves executing commands
- Allows the agent to execute shell / script commands
- Initiates network requests or calls external APIs / remote MCP
- References unscanned scripts: tools/list
- Audit scope: GitHub google/agents-cli/skills/google-agents-cli-publish/SKILL.md (only the SKILL.md text was scanned)
Rationale
- Clearly explains two registration methods: ADK agents deployed on Agent Runtime default to native ADK invocation (:streamQuery), while agents on Cloud Run / GKE and those from other frameworks must use A2A by passing the agent card URL
- Automatically reads the Agent Runtime ID and registration method from deployment_metadata.json if present; at minimum, only --gemini-app-id is required; defaults to non-interactive mode, making it suitable for CI, and repeated publishing updates in place
- Includes gcloud commands for the Agent Registry and a troubleshooting table (403 permissions, Session not found errors with the legacy google-cloud-aiplatform, etc.)
- The agents-cli suite has 6 other skills on the leaderboard; skills.sh saw 2918 installs in the last 24 hours, with a cumulative total of 516262, and weekly installs have dropped from 132534 to 11115 in recent weeks (indicating attention level only)
Usage
- npx skills add https://github.com/google/agents-cli --skill google-agents-cli-publish; install the CLI using uv tool install google-agents-cli
- Prerequisites: The agent must be deployed and accessible, and a Gemini app must be created in the Google Cloud console; deployment itself is handled by google-agents-cli-deploy
- Requires a Google Cloud project and account; the account used for registration must have Discovery Engine Editor permissions; for Cloud Run deployments using A2A, the Discovery Engine service account must be granted roles/run.servicesInvoker
Risks
- The installation, shell, and network request warnings from the audit align with the skill's purpose; the "unscanned script tools/list" is actually an MCP protocol method name, not a script
- Commands modify real resources in Google Cloud (registration, updates, deletions), with costs charged to the project specified by --project-id
- Only text-based agents are supported; voice / Live agents cannot be published to the Gemini app