← All skills
agent-platform-architecture
65 / 100 · Review before installing
Check before installing.
By google/skills (GitHub) · other · 23,813 stars · scanned at commit 793c036
Designs, engineers, and validates enterprise Gemini platform architectures. Use when designing multi-project hierarchies (Host, Central Governance Hub, Runtime Spoke, Tool/MCP Spoke), configuring Agent Gateway, authoring Agent Connectivity Templates (ALL_TRAFFIC vs PRIVATE_RANGES_ONLY), deploying Secure Web Proxy (SWP) with Policy-Based Routing (PBR) or Cross-Cloud mTLS Egress Hubs, configuring Private CA TrustConfig with Internal ALB + Serverless NEG, implementing Unified Access Policies (UAP …
Works with any agent that supports SKILL.md skills.
What this skill can do
Can call paid AI services billed to you
The author does not mention this.
Found in 33 places.
Show 17 more
- skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 69
`us-central1-aiplatform.googleapis.com`, - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 229
curl -s -X POST "https://${REGION}-aiplatform.googleapis.com/v1/${RE_NAME}:query" \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 235
curl -N -X POST "https://${REGION}-aiplatform.googleapis.com/v1/${RE_NAME}:streamQuery" \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 422
"https://${REGION}-aiplatform.googleapis.com/v1/projects/${PROJECT_NUMBER}/locations/${REGION}/reasoningEngines/${RE_ID}?force=true" \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 427
OP_JSON=$(curl -s -X GET "https://${REGION}-aiplatform.googleapis.com/v1/${RE_OP}" \ - skills/cloud/agent-platform-architecture/references/egress_routing_and_swp.md, line 179
sessionMatcher: "host() in ['api.openai.com', 'api.anthropic.com', 'api.cohere.ai'] || host().endsWith('.openai.com') || host().endsWith('.anthropic.com') || ho - skills/cloud/agent-platform-architecture/references/egress_routing_and_swp.md, line 188
sessionMatcher: "host() == 'aiplatform.googleapis.com' || host() == 'aiplatform.mtls.googleapis.com' || host() == '${REGION}-aiplatform.googleapis.com' || host( - skills/cloud/agent-platform-architecture/references/governance_security_policies.md, line 142
"conditions": {"iap.googleapis.com": {"title": "deny_denylisted_llms", "expression": "(destination.is_registered == false) && (destination.unregistered.host in - skills/cloud/agent-platform-architecture/references/governance_security_policies.md, line 245
strictly for blocklisted external hosts (`api.openai.com`, - skills/cloud/agent-platform-architecture/references/governance_security_policies.md, line 246
`api.anthropic.com`). - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 56
PSC_NEG2[PSC NEG to Google APIs<br/>psc_target_service: REGION-aiplatform.googleapis.com] - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 111
- `Host` rewritten to `${REGION}-aiplatform.googleapis.com` - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 118
APIs PSC NEG to the regional Agent Runtime (`aiplatform.googleapis.com`) - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 144
hostRewrite: "${REGION}-aiplatform.googleapis.com" - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 151
hostRewrite: "${REGION}-aiplatform.googleapis.com" - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 162
--region="${REGION}" --network-endpoint-type="private-service-connect" --psc-target-service="${REGION}-aiplatform.googleapis.com" - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 278
(`aiplatform.googleapis.com`).
and 13 more places
Runs commands on your computer
The author does not mention this.
Found in 1 place.
Downloads and installs other software
The author does not mention this.
Found in 2 places.
Sends data to these websites: ${region}-aiplatform.googleapis.com, agentidentity.googleapis.com, networksecurity.googleapis.com
The author does not mention this.
Found in 15 places.
Show 12 more
- skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 235
curl -N -X POST "https://${REGION}-aiplatform.googleapis.com/v1/${RE_NAME}:streamQuery" \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 284
curl -s -X POST "https://agentidentity.googleapis.com/v1/projects/${PROJECT_ID}/locations/${REGION}/authProviders?authProviderId=${AUTH_PROVIDER_ID}" \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 369
PATCH_RESP=$(curl -s -X PATCH \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 421
RE_DEL_RESP=$(curl -s -X DELETE \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 427
OP_JSON=$(curl -s -X GET "https://${REGION}-aiplatform.googleapis.com/v1/${RE_OP}" \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 435
GW_OP=$(curl -s -X DELETE \ - skills/cloud/agent-platform-architecture/references/agent_runtime_and_identity.md, line 443
ACT_OP=$(curl -s -X DELETE \ - skills/cloud/agent-platform-architecture/references/governance_security_policies.md, line 400
curl -s -X PATCH \ - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 392
`httpx.Client(timeout=0.4)` and cache federated STS tokens from - skills/cloud/agent-platform-architecture/references/ingress_patterns_and_rewrites.md, line 411
_STS_CLIENT = httpx.Client(timeout=0.4) - skills/cloud/agent-platform-architecture/references/topologies_and_project_layouts.md, line 178
ETAG=$(curl -s "https://networksecurity.googleapis.com/v1/projects/${AGW_PROJECT_ID}/locations/${REGION}/addressGroups/act-${TEMPLATE_ID}:getIamPolicy?options.r - skills/cloud/agent-platform-architecture/references/topologies_and_project_layouts.md, line 180
curl -s -X POST "https://networksecurity.googleapis.com/v1/projects/${AGW_PROJECT_ID}/locations/${REGION}/addressGroups/act-${TEMPLATE_ID}:setIamPolicy" \
Safer alternatives
Low-risk skills in the same category (other) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'agent-platform-architecture' ] || [ -L ~/.agents/skills/'agent-platform-architecture' ]; then echo 'A skill folder named agent-platform-architecture already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/google/skills' "$d" && git -C "$d" checkout --quiet '793c036c3af827151ada918c5f8cba823ef7086d' -- 'skills/cloud/agent-platform-architecture' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/cloud/agent-platform-architecture' ~/.agents/skills/'agent-platform-architecture' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'agent-platform-architecture' ~/.claude/skills/'agent-platform-architecture' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for google/skills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/google/skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-10 | 793c036 | 65 |
| 2026-11-08 | 2194d3b | 65 |
| 2026-11-06 | cdee760 | 55 |