← All skills
agent-platform-debugger
80 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By GoogleCloudPlatform/training-data-analyst (GitHub) · coding · 8,677 stars · scanned at commit 401b6d8
Debug GCP Gemini Enterprise Agent Platform issues: Agent Gateway 403s, Agent Registry failures, Agent Identity/IAM denials, IAP egressor authz, service-extensions delegated authz, Model Armor integration failures (500s/denials), hostname mismatches, authzPolicies/authzExtensions misconfig. Use whenever the user mentions agent gateway, agent registry, agent identity, IAP authz, ReasoningEngine 403s/500s, 'Egress request is not authorized', authzPolicies, authzExtensions, Model Armor, MCP server …
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 1 place.
Connects to the internet
The author does not mention this.
Found in 10 places.
Show 7 more
Can call paid AI services billed to you
The author does not mention this.
Found in 19 places.
Show 16 more
- self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 17
**Proxy Routing & TLS SNI:** The proxy performs TLS inspection and looks inside the HTTPS call for the SNI hostname. In Private Service Connect (PSC) environmen - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 40
A Google API like `aiplatform.googleapis.com` is reachable through *many* hostnames. The agent might call any of them depending on the SDK version, regional cli - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 44
| Base | `aiplatform.googleapis.com` | - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 46
| Locational | `us-central1-aiplatform.googleapis.com` | - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 51
**The gateway matches hostnames exactly.** If you registered only `aiplatform.googleapis.com` but the SDK actually called `us-central1-aiplatform.googleapis.com - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 77
- `https://{region}-aiplatform.googleapis.com` - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 113
- **Metric**: `aiplatform.googleapis.com/reasoning_engine/query_latency` - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 135
resource.type="aiplatform.googleapis.com/ReasoningEngine" - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 144
gcloud logging read 'resource.type="aiplatform.googleapis.com/ReasoningEngine" AND resource.labels.location="'$LOCATION'" AND resource.labels.reasoning_engine_i - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 162
resource.type="aiplatform.googleapis.com/ReasoningEngine" - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 165
logName="projects/$PROJECT_ID/logs/aiplatform.googleapis.com%2Freasoning_engine_stderr" - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/field-manual.md, line 171
gcloud logging read 'resource.type="aiplatform.googleapis.com/ReasoningEngine" AND resource.labels.location="'$LOCATION'" AND resource.labels.reasoning_engine_i - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/known-issues.md, line 10
- Log name: `aiplatform.googleapis.com/reasoning_engine_stderr` - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/known-issues.md, line 115
**Specific Case: CONNECT to PSC VIP (`240.0.0.2:443`) with Default Denied** In environments using Private Service Connect (PSC), clients resolve Google APIs to - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/known-issues.md, line 136
**Fix:** Identify the inner hostname the agent was attempting to reach (e.g. `us-central1-aiplatform.googleapis.com`) and ensure ALL required hostname permutati - self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger/references/known-issues.md, line 177
- Log name: `aiplatform.googleapis.com/reasoning_engine_stderr`
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'agent-platform-debugger' ] || [ -L ~/.agents/skills/'agent-platform-debugger' ]; then echo 'A skill folder named agent-platform-debugger already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/GoogleCloudPlatform/training-data-analyst' "$d" && git -C "$d" checkout --quiet '401b6d8fc110df06b0c867951b35c8370498eefd' -- 'self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger' && mkdir -p ~/.agents/skills && cp -R "$d"/'self-paced-labs/agents/secure-agent-egress-gateway-challenge-starter/.agents/skills/agent-platform-debugger' ~/.agents/skills/'agent-platform-debugger' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'agent-platform-debugger' ~/.claude/skills/'agent-platform-debugger' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for GoogleCloudPlatform/training-data-analyst shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/GoogleCloudPlatform/training-data-analyst/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | 401b6d8 | 80 |
Also found in
Identical copies of this skill exist at:
- GoogleCloudPlatform/training-data-analyst/self-paced-labs/agents/secure-agent-egress-gateway/.agents/skills/agent-platform-debugger