172 skills (repositories by google) · sorted by popularity
Design and deploy a Google Cloud global external Application Load Balancer with caching and web attack protection. Matches settings to workload types, discovers existing backends, and generates Terraform or gcloud deployment scripts.
Guides migration of existing AI inference workloads to self-hosted GKE, Google’s managed Kubernetes service. Covers requirements, GPU sizing, deployment configuration, model storage, validation, and traffic cutover using gcloud and kubectl.
Define reliability goals for Google Cloud services and generate Terraform files for Cloud Monitoring SLO alerts. A guided conversation gathers service scope, measurement metrics, targets, and alert conditions, then explains the PromQL queries used to evaluate them.
Design and implement Google Cloud serverless web apps with separate presentation, application, and data layers. Produces architecture diagrams, Terraform infrastructure code, deployment instructions, and validation scripts for private networking and controlled access between layers.
Design an enterprise search system that answers questions using retrieved company content, an approach called RAG. Gather requirements and produce architecture diagrams, deployment guidance, and validation plans using GKE, AlloyDB, and open models.
Review Google Cloud workloads using the Performance Optimization pillar of the Well-Architected Framework. Assess performance requirements and architecture, then get actionable recommendations for resource allocation, caching, independent components, automatic scaling, and ongoing monitoring.
Design a Google Cloud system that combines multiple services, starting with a discussion of business and technical requirements. The skill produces service recommendations, architecture diagrams, deployment guidance, and validation plans, with user approval at each stage.
Design hybrid search on AlloyDB by combining meaning-based search, keywords, and SQL filters. Turn requirements into architecture diagrams, database setup scripts, deployment guidance, and validation plans for search applications on Google Cloud.
Design Google Cloud systems where multiple AI agents process live audio, video, or text and respond in real time. Guides requirements discovery, architecture diagrams, infrastructure code, deployment instructions, and validation for technical guidance or safety monitoring workloads.
Set up an organization-wide Google Cloud foundation with 17 baseline security policies, environment folders and projects, billing links, and centralized audit logging and monitoring. Check the resulting setup against a defined validation checklist.
Design a shared data platform across Google Cloud, AWS, and Azure for analytics and AI. The skill turns requirements into architecture diagrams, infrastructure code, deployment instructions, and validation checks using Apache Iceberg and BigQuery data agents.
Design security controls for Google Cloud Agent Gateway, covering incoming client requests and outgoing agent tool calls. Produce architecture diagrams, configuration files, deployment commands, and validation scripts using Model Armor, IAP, and Agent Registry.
Triage Google SecOps alerts by checking logs, related cases, asset importance, and threat intelligence. Classify findings, adjust severity and priority, and document evidence for closing benign cases or handing suspicious activity to incident responders.
Search Google SecOps events for threats that have not triggered alerts. Test attack hypotheses, check historical records for compromise indicators, and examine unusual activity, then document findings and add them to relevant security cases.
Investigate Google Cloud network problems using traffic logs, performance metrics, and connection path tests. Identify blocked traffic, packet loss, and latency, summarize traffic volumes, or estimate VPC Flow Logs costs.
Guides authentication and access permissions for Google Cloud users and applications. It helps choose credentials for local development, production services, or external clouds, with guidance on short-lived credentials and avoiding downloaded service account keys.
Helps individual developers get started on Google Cloud by checking local tools and authentication, selecting or creating a project, and linking billing. It verifies the setup and directs users to specialized guides for their first deployment.
Retrieve security findings from Google Cloud Security Command Center for initial assessment. Filter active vulnerabilities, threats, and external exposures, inspect one finding’s full details, or group counts by category to understand the reported risks.
Design a Google Cloud system for data analysis or machine learning with AI agents. Turn requirements into product choices, an architecture diagram, infrastructure configuration, deployment instructions, and validation steps, with user reviews between phases.
Design AI agent analytics workflows across distributed tables and documents. Combine Knowledge Catalog for metadata, meaning information about data and its usage rules, with managed Spark processing to produce architecture diagrams, deployment guidance, and validation plans.
Plan and build AI agents on Google Cloud, from gathering requirements to choosing a single-agent or multi-agent design. Produce architecture diagrams, deployment code and instructions, and validation plans tailored to the workload.
Investigate Google Cloud access denials and choose a resolution path based on the caller’s permissions. Supports temporary access activation, structured escalation tickets, policy analysis, and administrator selection of roles that grant only the permissions needed.
Audits Google Cloud Filestore instances for missing or outdated backups, overly broad file share access, and zone isolation requirements. Produces a health scorecard, prioritized findings, an instance inventory, and proposed backup remediation.
Diagnoses applications that fail to start or repeatedly crash on GKE, Google's managed Kubernetes service. It examines logs, events, memory use, image pulls, and connectivity, then proposes configuration patches or commands without applying live changes.