Agent skill · Audited from source
langgraph-cli
skill · langchain-ai/langchain-skillsMIT licenceAudited 31 Oct 2026 · source a78b2e2257e3
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit a78b2e2257e3 and found no filesystem, network or shell access and no hard-coded secrets. What it does: INVOKE THIS SKILL when using the langgraph CLI to scaffold, develop, build, or deploy LangGraph applications. Covers langgraph new, dev, build, up, deploy, and langgraph.json configuration.
Cite
Cite this page
ModelsAtlas. “langgraph-cli (langchain-ai/langchain-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/langchain-ai/langgraph-cli
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha a78b2e2257e3 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherlangchain-ai GitHub organizationOwner of the repository this skill is read from
- Source folderlangchain-ai/langchain-skills/config/skills/langgraph-cliThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdicta78b2e2257e3A new audit runs when the source changes
- Repository statusNot archivedLast push 1 day ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: INVOKE THIS SKILL when using the langgraph CLI to scaffold, develop, build, or deploy LangGraph applications. Covers langgraph new, dev, build, up, deploy, and langgraph.json configuration.
--- name: langgraph-cli description: "INVOKE THIS SKILL when using the langgraph CLI to scaffold, develop, build, or deploy LangGraph applications. Covers langgraph new, dev, build, up, deploy, and langgraph.json configuration." --- <overview> The `langgraph` CLI manages the full lifecycle of LangGraph applications — from scaffolding a new project to deploying it to LangGraph Platform (LangSmith Deployments). Key commands: - **`langgraph new`** — Scaffold a project from a template - **`langgraph dev`** — Run locally with hot reload (no Docker) - **`langgraph build`** — Build a Docker image - **`langgraph up`** — Launch locally via Docker Compose - **`langgraph deploy`** — Ship to LangGraph Platform - **`langgraph dockerfile`** — Generate a Dockerfile All commands (except `new`) read from a `langgraph.json` config file in the project root. </overview> ## When to use Use this skill when the user wants to: - Scaffold a new LangGraph project - Run a local development or production-like server - Build or deploy a LangGraph application - Understand or edit `langgraph.json` configuration - Manage LangSmith Deployments (list, delete, view logs) ## Installation ```bash # Python pip install 'langgraph-cli[inmem]' # includes langgraph dev support pip install langgraph-cli # without dev server (build/up/deploy only) # if using UV as package manager uv add "langgraph-cli[inmem]" # includes langgraph dev support uv add langgraph-cli # without dev server (build/up/deploy only) # JavaScript npx @langchain/langgraph-cli # use on demand npm install -g @langchain/langgraph-cli # install globally (available as langgraphjs) ``` ## Commands ### `langgraph new [PATH]` Scaffold a new project from a template. ```bash langgraph new # interactive template selection langgraph new ./my-agent # create in specific directory langgraph new --template agent-python # skip prompt, use template directly ``` Available templates: `deep-agent-python`, `deep-agent-js`, `agent-python`, `new-langgraph-project-python`, `new-langgraph-project-js` ### `langgraph dev` Run a local development server with hot reloading. No Docker required. ```bash langgraph dev # default: localhost:2024 langgraph dev --port 8000 # custom port langgraph dev --config ./langgraph.json # explicit config path langgraph dev --no-reload # disable hot reload langgraph dev --no-browser # don't auto-open LangGraph Studio langgraph dev --host 0.0.0.0 # bind to all interfaces (trusted networks only) langgraph dev --tunnel # expose via Cloudflare tunnel for remote access langgraph dev --debug-port 5678 # enable remote debugger (requires debugpy) langgraph dev --n-jobs-per-worker 20 # max concurrent jobs per worker (default: 10) ``` ### `langgraph build` Build a Docker image for the LangGraph API server. ```bash langgraph build -t my-image # required: tag the image langgraph build -t my-image --no-pull # use locally-built base images langgraph build -t my-image -c langgraph.json # explicit config langgraph build -t my-image --base-image langchain/langgraph-server:0.2.18 # pin base version ``` ### `langgraph up` Launch the LangGraph API server via Docker Compose (includes Postgres). ```bash langgraph up # default port 8123 langgraph up --port 8000 # custom port langgraph up --watch # restart on file changes langgraph up --recreate # force fresh build (useful for pre-deploy validation) langgraph up --postgres-uri postgresql://... # external Postgres langgraph up --no-pull # use local images (after langgraph build) langgraph up --image my-image # skip build, use pre-built image langgraph up -d docker-compose.yml # add extra Docker services langgraph up --debugger-port 8124 # serve debugger UI langgraph up --wait # block until services are healthy ``` ### `langgraph deploy` Build and deploy to LangGraph Platform (LangSmith Deployments). Requires Docker. On Apple Silicon (M1/M2/M3), Docker Buildx is also required for cross-compiling to `linux/amd64`. ```bash langgraph deploy # deploy, name defaults to directory name langgraph deploy --name my-agent # explicit deployment name langgraph deploy --deployment-type prod # production deployment (default: dev) langgraph deploy --tag v1.2.0 # custom image tag (default: latest) langgraph deploy --deployment-id <id> # update an existing deployment by ID langgraph deploy --config ./langgraph.json # explicit config path langgraph deploy --no-wait # don't wait for deployment status langgraph deploy --verbose # show detailed server logs ``` Prereq: `LANGSMITH_API_KEY` in environment or `.env`. `langgraph deploy` also accepts build flags: `--base-image`, `--pull`/`--no-pull`. #### `langgraph deploy list` ```bash langgraph deploy list # list all deployments langgraph deploy list --name-contains bot # filter by name ``` #### `langgraph deploy delete` ```bash langgraph deploy delete <deployment-id> # interactive confirmation langgraph deploy delete <deployment-id> --force # skip confirmation ``` #### `langgraph deploy logs` ```bash langgraph deploy logs # runtime logs, last 100 langgraph deploy logs --name my-agent # by deployment name langgraph deploy logs --deployment-id <id> # by deployment ID langgraph deploy logs --type build # build logs instead of runtime langgraph deploy logs -f # follow/stream logs langgraph deploy logs --level error # filter by level (debu
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit a78b2e2
pip install 'langgraph-cli[inmem]' # includes langgraph dev support pip install langgraph-cli # without dev server (build/up/deploy only) uv add "langgraph-cli[inmem]" # includes langgraph dev support uv add langgraph-cli # without dev server (build/up/deploy only) npm install -g @langchain/langgraph-cli # install globally (available as langgraphjs)
git clone https://github.com/langchain-ai/langchain-skills git -C langchain-skills checkout a78b2e2257e3
Commands as the repository documents them: shown, never run by us. Our verdict covers commit a78b2e2257e3 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
a78b2e2257e3
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/langchain-ai/langgraph-cli/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when creating new skills, editing existing skills, or verifying skills work before deployment
mattpocock/skills
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
mattpocock/skills
Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
Add this badge to your README
[](https://modelsatlas.com/skills/langchain-ai/langgraph-cli/)
<a href="https://modelsatlas.com/skills/langchain-ai/langgraph-cli/"><img src="https://modelsatlas.com/skills/langchain-ai/langgraph-cli/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about langgraph-cli
Is langgraph-cli safe to install?
What can langgraph-cli access on my machine?
How current is this page?
Sources
- github.com/langchain-ai/langchain-skills/tree/main/config/skills — the audited source at commit a78b2e2257e3 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- Is langgraph-cli safe to install?
- What can langgraph-cli access on my machine?
- How current is this page?