Google

Find and synthesize official Google developer documentation for platforms including Google Cloud, Gemini, Android, and Firebase. Retrieve command syntax, API details, permissions, and product comparisons through Developer Knowledge, then turn the findings into practical technical answers.

• Checking gcloud commands and flags
• Looking up API syntax and required permissions
• Comparing Google products and architectures

Build and test threat detection rules in Google SecOps using YARA-L 2.0, its rule language. The skill also checks existing coverage with simulated attack events, proposes rules for confirmed gaps, and deploys approved rules.

• Creating detection rules from known attack behavior
• Tuning existing rules to reduce false positives
• Checking detection gaps against threat reports and CVE disclosures

Set up an organization-wide Google Cloud foundation with 17 baseline security policies, environment folders and projects, billing links, and centralized audit logging and monitoring. Check the resulting setup against a defined validation checklist.

• Set up the initial foundation for a Google Cloud organization
• Organize production, non-production, and development resources
• Apply baseline security policies across an organization

Design a Google Cloud system that combines multiple services, starting with a discussion of business and technical requirements. The skill produces service recommendations, architecture diagrams, deployment guidance, and validation plans, with user approval at each stage.

• Gather requirements for a new cloud workload
• Compare and select services for a cloud migration
• Create a diagram and explain system data flows

Check Google Cloud IAM allow policy changes against the last 90 days of access logs. The skill identifies access that could be lost and applies changes only after a successful simulation and user approval.

• Checking access impact before removing a role
• Reviewing allow policy changes across resource scopes
• Applying policy changes after simulation and approval

Reviews Google Cloud spending and resource usage to identify waste, recommend suitable resource sizes, compare discount options, and establish ongoing cost management using the cost optimization guidance in the Google Cloud Well-Architected Framework.

• Reviewing Google Cloud spending by team or project
• Finding idle resources and oversized instances
• Comparing CUDs, SUDs, and Spot VMs

Inspect and manage Google Cloud IAM policies that grant roles or explicitly deny permissions. The skill prepares policy changes for user approval, supports organization, folder, project, and supported resource scopes, and verifies the resulting policy after execution.

• Reviewing existing allow and deny policies
• Adding or removing role bindings for specific identities
• Creating or updating organization, folder, or project deny policies

Design and deploy a Google Cloud global external Application Load Balancer with caching and web attack protection. Matches settings to workload types, discovers existing backends, and generates Terraform or gcloud deployment scripts.

• Design global web delivery across multiple backends
• Choose caching settings for static content and APIs
• Configure Cloud Armor protection for each workload

Search Google SecOps events for threats that have not triggered alerts. Test attack hypotheses, check historical records for compromise indicators, and examine unusual activity, then document findings and add them to relevant security cases.

• Test a threat hypothesis based on an attack technique
• Check historical events for newly disclosed compromise indicators
• Investigate rare program executions and network destinations

Set up Google's agents-cli and find the right workflow for building AI agents. Connects requirements planning, project creation, implementation, evaluation, deployment, publishing, and monitoring through specialized skills for the Gemini Enterprise Agent Platform.

• Set up agents-cli and its specialized skills
• Document agent requirements before writing code
• Find the workflow for creating and evaluating an ADK agent

Review Google Cloud operations and develop guidance for monitoring, incident response, resource sizing, and automated deployments. Use framework-based questions and checklists to identify gaps in production readiness and plan ongoing operational improvements.

• Reviewing production readiness
• Planning monitoring and logging
• Improving incident response procedures

Diagnose Google Cloud Filestore mount failures by checking client access rules, network firewalls, and audit logs. Distinguish permission errors from connection timeouts, then provide a structured report and remediation commands that require confirmation before execution.

• Investigating a Filestore mount that hangs or fails
• Diagnosing access-denied errors from a GKE workload
• Checking client permissions and VPC firewall rules

Review Google Cloud workloads using the Performance Optimization pillar of the Well-Architected Framework. Assess performance requirements and architecture, then get actionable recommendations for resource allocation, caching, independent components, automatic scaling, and ongoing monitoring.

• Review resource capacity for expected peak demand
• Assess automatic scaling for traffic spikes
• Review component design for independent scaling

Investigate security incidents in Google SecOps by connecting host, user, and network events. Reconstruct attack timelines, trace movement between systems, assess affected assets, and organize findings into case notes and investigation reports.

• Reconstruct a suspicious host's activity timeline
• Investigate unusual user logins and resource access
• Trace attacker movement between systems

Design and implement Google Cloud serverless web apps with separate presentation, application, and data layers. Produces architecture diagrams, Terraform infrastructure code, deployment instructions, and validation scripts for private networking and controlled access between layers.

• Design a serverless web app with separate application layers
• Generate Terraform for private Cloud Run and Cloud SQL connections
• Plan regional data residency requirements

Helps choose and tune Cloud Storage FUSE mounts, which expose bucket objects through file paths. It covers cache sizing, training performance, checkpoint write safety, and cost diagnosis on GKE, Compute Engine, and Cloud Run.

• Access training data through file paths
• Choose between FUSE, native reads, and shared file systems
• Check checkpoint and concurrent write safety

Design hybrid search on AlloyDB by combining meaning-based search, keywords, and SQL filters. Turn requirements into architecture diagrams, database setup scripts, deployment guidance, and validation plans for search applications on Google Cloud.

• Designing product search with meaning-based matching and attribute filters
• Planning result reranking and AI quality checks
• Preparing AlloyDB and Cloud Run deployment guidance

Design and create new Cloud Storage buckets for uses such as backups, media, and AI data. Check project security and name availability, choose storage and protection settings, and produce creation commands or code in the preferred format.

• Creating storage for application media
• Designing buckets for sensitive data
• Preparing backup and long-term archive storage

Plan and build AI agents on Google Cloud, from gathering requirements to choosing a single-agent or multi-agent design. Produce architecture diagrams, deployment code and instructions, and validation plans tailored to the workload.

• Plan an AI agent architecture on Google Cloud
• Choose between single-agent and multi-agent designs
• Prepare deployment code and step-by-step instructions

Assess Google Cloud workloads for environmental sustainability using the Well-Architected Framework. Get recommendations on lower-carbon regions, efficient computing and storage, AI energy use, and ongoing emissions measurement with Carbon Footprint.

• Reviewing cloud architecture for environmental impact
• Comparing deployment regions by carbon-free energy use
• Reducing energy waste in AI and computing workloads

Investigate Google Cloud access denials and choose a resolution path based on the caller’s permissions. Supports temporary access activation, structured escalation tickets, policy analysis, and administrator selection of roles that grant only the permissions needed.

• Investigating Google Cloud access denials
• Activating temporary access for development
• Preparing access issue tickets for administrators

Build AI features for Dart and Flutter applications with the Genkit Dart SDK. Provides code and documentation for conversational agents, reusable processing flows, prompt files, model integrations, interactive interfaces, and debugging through recorded execution traces.

• Adding a conversational AI agent to a Flutter app
• Building AI processing flows in Dart
• Managing prompts in separate files

Plans, executes, and validates Google Kubernetes Engine upgrades for Standard and Autopilot clusters. Creates environment-specific upgrade plans, checklists, and command-based runbooks, with guidance on maintenance timing, node upgrade strategies, workload readiness, and stalled upgrades.

• Planning a GKE version upgrade
• Choosing release channels and maintenance schedules
• Preparing node pool upgrades for databases or GPU workloads

Review GKE reliability settings for applications running in Kubernetes. Configure availability safeguards during maintenance, health checks, replica counts, graceful shutdown, and distribution across zones and nodes to help workloads handle disruptions.

• Reviewing GKE high availability
• Maintaining Pod availability during upgrades
• Configuring application health checks