[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6993G44KHSR7KV34PYT4ACD":3,"skill-same:01M6993G44KHSR7KV34PYT4ACD":109},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":52,"commitSha":53,"skillDirectory":54,"forksCount":55,"repositoryHtmlUrl":56,"repositoryHomepageUrl":6,"ownerHtmlUrl":57,"ownerBlogUrl":58,"ownerDescription":59,"updatedAt":60,"install":61,"resources":74},"01M6993G44KHSR7KV34PYT4ACD","gke-app-onboarding",null,"Manages GKE application onboarding, covering containerization, deployment manifests, and migration. Use when onboarding or deploying an application to GKE for the first time, or containerizing an app for GKE. Don't use for general GKE cluster administration or upgrades (use gke-basics or gke-upgrades instead).","google\u002Fskills","google","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1342004?v=4","01M698VYEFDM0VJBZDYYJ2T83S","Google","01M698WR0H76ENHE587T9EJT89",24122,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000038","人力资源","PROFESSION","适用职业",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"gke app onboarding","onboarding","gke","app","when","containers","for","administration","manifests","cluster","time","application","general","basics","migration","containerization","use","upgrades","first","deployment","2026-11-10 10:12:30",false,"---\nname: gke-app-onboarding\ndescription: >-\n  Manages GKE application onboarding, covering containerization, deployment\n  manifests, and migration. Use when onboarding or deploying an application to\n  GKE for the first time, or containerizing an app for GKE. Don't use for\n  general GKE cluster administration or upgrades (use gke-basics or\n  gke-upgrades instead).\nmetadata:\n  version: \"1.0.1\"\n  category: Containers\n---\n\n# GKE App Onboarding\n\nThis reference provides workflows for containerizing and deploying applications\nto GKE for the first time.\n\n> **MCP Tools:** `apply_k8s_manifest`, `get_k8s_resource`,\n> `get_k8s_rollout_status`, `get_k8s_logs`, `describe_k8s_resource`\n\n## Attribution\n\n**MUST READ**: Before executing any `gcloud`, REST API, or MCP command, you\nMUST read [Usage Attribution](references\u002Fattribution.md). For commands executed\ndirectly in the terminal (never in generated scripts, Terraform, or user code),\nprefix `gcloud` with\n`CLOUDSDK_METRICS_REQUEST_ATTRIBUTION=\"agent-skills\u002F1.0 (skill:gke-app-onboarding)\"`\nand append `agent-skills\u002F1.0 (skill:gke-app-onboarding)` to `User-Agent` headers.\n\n## Workflow\n\n### 1. App Assessment\n\nBefore containerizing, assess the application:\n\n-   **Language & Framework**: Identify the tech stack\n-   **Dependencies**: List required libraries and external services\n-   **Configuration**: How is the app configured? (env vars, config files,\n    secrets)\n-   **Statefulness**: Does it need persistent storage? (databases, file storage)\n-   **Networking**: Port mapping and protocol (HTTP, gRPC, TCP)\n-   **Health endpoints**: Does the app expose health check endpoints?\n\n### 2. Containerization\n\nCreate a container image. A Dockerfile with a multi-stage build is recommended\nfor most apps — see the Go Dockerfile in\n[`references\u002Fgo-example.md`](.\u002Freferences\u002Fgo-example.md) for a worked example.\n\n**Best practices:**\n\n-   Use multi-stage builds to keep production images small\n-   Use distroless or minimal base images to reduce attack surface\n-   Run as non-root user\n-   Log to `stdout` and `stderr` for Cloud Logging collection\n\nA complete worked Node.js example is provided in [`assets\u002F`](.\u002Fassets\u002F):\n[`Dockerfile`](.\u002Fassets\u002FDockerfile) (non-root `node` user),\n[`index.js`](.\u002Fassets\u002Findex.js) (implements distinct `\u002Fhealthz` and `\u002Freadyz`\nendpoints), [`package.json`](.\u002Fassets\u002Fpackage.json), and\n[`deployment.yaml`](.\u002Fassets\u002Fdeployment.yaml) (hardened Deployment plus\nClusterIP Service, probes wired to `\u002Fhealthz` and `\u002Freadyz`).\n\nFor applications where writing a Dockerfile is not preferred, you can use\n[**Cloud Native Buildpacks**](https:\u002F\u002Fbuildpacks.io\u002F) to automatically detect\nthe language and build a container image:\n\n```bash\npack build \u003Cimage> --builder gcr.io\u002Fbuildpacks\u002Fbuilder:latest\n```\n\n### 3. Image Management\n\nBuild and store the container image:\n\n```bash\n# Configure Docker for Artifact Registry\ngcloud auth configure-docker \u003CREGION>-docker.pkg.dev --quiet\n\n# Build and push\ndocker build -t \u003CREGION>-docker.pkg.dev\u002F\u003CPROJECT>\u002F\u003CREPO>\u002F\u003CIMAGE>:\u003CTAG> .\ndocker push \u003CREGION>-docker.pkg.dev\u002F\u003CPROJECT>\u002F\u003CREPO>\u002F\u003CIMAGE>:\u003CTAG>\n```\n\n**Vulnerability scanning**: Enable automatic scanning in Artifact Registry to\ndetect issues in base images and dependencies.\n\n```bash\n# Check scan results\ngcloud artifacts docker images describe \\\n  \u003CREGION>-docker.pkg.dev\u002F\u003CPROJECT>\u002F\u003CREPO>\u002F\u003CIMAGE>:\u003CTAG> \\\n  --show-package-vulnerability \\\n  --quiet\n```\n\n### 4. Manifest Generation\n\nGenerate Kubernetes manifests for the application. A baseline Deployment +\nClusterIP Service manifest (probes, resource requests\u002Flimits, 2 replicas) is in\n[`references\u002Fgo-example.md`](.\u002Freferences\u002Fgo-example.md).\n\n**Checklist for manifests:**\n\n-   Resource requests and limits set\n-   Liveness and readiness probes configured\n-   At least 2 replicas for production\n-   Service type appropriate (ClusterIP for internal, use Gateway API for\n    external)\n\nSee [`assets\u002Fdeployment.yaml`](.\u002Fassets\u002Fdeployment.yaml) for a hardened worked\nexample. A production-hardened pod spec must include ALL of: `runAsNonRoot:\ntrue`, `readOnlyRootFilesystem: true`, `allowPrivilegeEscalation: false`,\n`capabilities.drop: [\"ALL\"]`, `seccompProfile: {type: RuntimeDefault}`,\n`automountServiceAccountToken: false` (unless the pod needs the token — then say\nwhy), resource requests, digest-pinned image, and a ClusterIP Service.\n\nThat checklist is the baseline for any pod spec produced here. For manifest work\nbeyond it — Gateway API routes, GCS FUSE and secret volume mounting, `subPath`\noverlays, Spot VM targeting, or AI\u002Finference serving specs — see\n`gke-manifest-generation`.\n\n### 5. Deploy\n\n```\n# MCP (preferred)\napply_k8s_manifest(parent=\"projects\u002F\u003CPROJECT>\u002Flocations\u002F\u003CREGION>\u002Fclusters\u002F\u003CCLUSTER>\", yamlManifest=\"\u003Cmanifest>\")\n\n# Verify\nget_k8s_rollout_status(parent=\"...\", resourceType=\"deployment\", name=\"my-app\")\nget_k8s_resource(parent=\"...\", resourceType=\"pod\", labelSelector=\"app=my-app\")\n```\n\n**kubectl fallback:**\n\n```bash\nkubectl apply -f manifests\u002F\nkubectl rollout status deployment\u002Fmy-app\nkubectl get pods -l app=my-app\n```\n\n## Golden Path Onboarding Checklist\n\nFor every production application onboarding to GKE:\n\n1.  **Container Security**: Non-root user (`runAsNonRoot: true`), lockfile\n    install, minimal\u002Fdistroless base image.\n2.  **Resource Requests**: Explicit CPU and memory requests (mandatory for GKE\n    Autopilot).\n3.  **Health Probes**: Both liveness (`livenessProbe`) and readiness\n    (`readinessProbe`) probes configured.\n4.  **Reliability & Availability**: At least 2 replicas and a\n    `PodDisruptionBudget` (`minAvailable: 1` or `2`).\n5.  **IAM & Workload Identity**: Workload Identity\n    (`iam.gke.io\u002Fgcp-service-account`) instead of static service account keys.\n\n## Next Steps\n\nOnce the application is running on GKE:\n\n-   Configure autoscaling — see the `gke-workload-scaling` skill\n-   Set up observability — see the `gke-observability` skill\n-   Harden security — see the `gke-workload-security` skill\n-   Configure reliability (PDBs, topology spread) — see the `gke-reliability`\n    skill\n","# GKE App Onboarding\n\nThis reference provides workflows for containerizing and deploying applications\nto GKE for the first time.\n\n> **MCP Tools:** `apply_k8s_manifest`, `get_k8s_resource`,\n> `get_k8s_rollout_status`, `get_k8s_logs`, `describe_k8s_resource`\n\n## Attribution\n\n**MUST READ**: Before executing any `gcloud`, REST API, or MCP command, you\nMUST read [Usage Attribution](references\u002Fattribution.md). For commands executed\ndirectly in the terminal (never in generated scripts, Terraform, or user code),\nprefix `gcloud` with\n`CLOUDSDK_METRICS_REQUEST_ATTRIBUTION=\"agent-skills\u002F1.0 (skill:gke-app-onboarding)\"`\nand append `agent-skills\u002F1.0 (skill:gke-app-onboarding)` to `User-Agent` headers.\n\n## Workflow\n\n### 1. App Assessment\n\nBefore containerizing, assess the application:\n\n-   **Language & Framework**: Identify the tech stack\n-   **Dependencies**: List required libraries and external services\n-   **Configuration**: How is the app configured? (env vars, config files,\n    secrets)\n-   **Statefulness**: Does it need persistent storage? (databases, file storage)\n-   **Networking**: Port mapping and protocol (HTTP, gRPC, TCP)\n-   **Health endpoints**: Does the app expose health check endpoints?\n\n### 2. Containerization\n\nCreate a container image. A Dockerfile with a multi-stage build is recommended\nfor most apps — see the Go Dockerfile in\n[`references\u002Fgo-example.md`](.\u002Freferences\u002Fgo-example.md) for a worked example.\n\n**Best practices:**\n\n-   Use multi-stage builds to keep production images small\n-   Use distroless or minimal base images to reduce attack surface\n-   Run as non-root user\n-   Log to `stdout` and `stderr` for Cloud Logging collection\n\nA complete worked Node.js example is provided in [`assets\u002F`](.\u002Fassets\u002F):\n[`Dockerfile`](.\u002Fassets\u002FDockerfile) (non-root `node` user),\n[`index.js`](.\u002Fassets\u002Findex.js) (implements distinct `\u002Fhealthz` and `\u002Freadyz`\nendpoints), [`package.json`](.\u002Fassets\u002Fpackage.json), and\n[`deployment.yaml`](.\u002Fassets\u002Fdeployment.yaml) (hardened Deployment plus\nClusterIP Service, probes wired to `\u002Fhealthz` and `\u002Freadyz`).\n\nFor applications where writing a Dockerfile is not preferred, you can use\n[**Cloud Native Buildpacks**](https:\u002F\u002Fbuildpacks.io\u002F) to automatically detect\nthe language and build a container image:\n\n```bash\npack build \u003Cimage> --builder gcr.io\u002Fbuildpacks\u002Fbuilder:latest\n```\n\n### 3. Image Management\n\nBuild and store the container image:\n\n```bash\n# Configure Docker for Artifact Registry\ngcloud auth configure-docker \u003CREGION>-docker.pkg.dev --quiet\n\n# Build and push\ndocker build -t \u003CREGION>-docker.pkg.dev\u002F\u003CPROJECT>\u002F\u003CREPO>\u002F\u003CIMAGE>:\u003CTAG> .\ndocker push \u003CREGION>-docker.pkg.dev\u002F\u003CPROJECT>\u002F\u003CREPO>\u002F\u003CIMAGE>:\u003CTAG>\n```\n\n**Vulnerability scanning**: Enable automatic scanning in Artifact Registry to\ndetect issues in base images and dependencies.\n\n```bash\n# Check scan results\ngcloud artifacts docker images describe \\\n  \u003CREGION>-docker.pkg.dev\u002F\u003CPROJECT>\u002F\u003CREPO>\u002F\u003CIMAGE>:\u003CTAG> \\\n  --show-package-vulnerability \\\n  --quiet\n```\n\n### 4. Manifest Generation\n\nGenerate Kubernetes manifests for the application. A baseline Deployment +\nClusterIP Service manifest (probes, resource requests\u002Flimits, 2 replicas) is in\n[`references\u002Fgo-example.md`](.\u002Freferences\u002Fgo-example.md).\n\n**Checklist for manifests:**\n\n-   Resource requests and limits set\n-   Liveness and readiness probes configured\n-   At least 2 replicas for production\n-   Service type appropriate (ClusterIP for internal, use Gateway API for\n    external)\n\nSee [`assets\u002Fdeployment.yaml`](.\u002Fassets\u002Fdeployment.yaml) for a hardened worked\nexample. A production-hardened pod spec must include ALL of: `runAsNonRoot:\ntrue`, `readOnlyRootFilesystem: true`, `allowPrivilegeEscalation: false`,\n`capabilities.drop: [\"ALL\"]`, `seccompProfile: {type: RuntimeDefault}`,\n`automountServiceAccountToken: false` (unless the pod needs the token — then say\nwhy), resource requests, digest-pinned image, and a ClusterIP Service.\n\nThat checklist is the baseline for any pod spec produced here. For manifest work\nbeyond it — Gateway API routes, GCS FUSE and secret volume mounting, `subPath`\noverlays, Spot VM targeting, or AI\u002Finference serving specs — see\n`gke-manifest-generation`.\n\n### 5. Deploy\n\n```\n# MCP (preferred)\napply_k8s_manifest(parent=\"projects\u002F\u003CPROJECT>\u002Flocations\u002F\u003CREGION>\u002Fclusters\u002F\u003CCLUSTER>\", yamlManifest=\"\u003Cmanifest>\")\n\n# Verify\nget_k8s_rollout_status(parent=\"...\", resourceType=\"deployment\", name=\"my-app\")\nget_k8s_resource(parent=\"...\", resourceType=\"pod\", labelSelector=\"app=my-app\")\n```\n\n**kubectl fallback:**\n\n```bash\nkubectl apply -f manifests\u002F\nkubectl rollout status deployment\u002Fmy-app\nkubectl get pods -l app=my-app\n```\n\n## Golden Path Onboarding Checklist\n\nFor every production application onboarding to GKE:\n\n1.  **Container Security**: Non-root user (`runAsNonRoot: true`), lockfile\n    install, minimal\u002Fdistroless base image.\n2.  **Resource Requests**: Explicit CPU and memory requests (mandatory for GKE\n    Autopilot).\n3.  **Health Probes**: Both liveness (`livenessProbe`) and readiness\n    (`readinessProbe`) probes configured.\n4.  **Reliability & Availability**: At least 2 replicas and a\n    `PodDisruptionBudget` (`minAvailable: 1` or `2`).\n5.  **IAM & Workload Identity**: Workload Identity\n    (`iam.gke.io\u002Fgcp-service-account`) instead of static service account keys.\n\n## Next Steps\n\nOnce the application is running on GKE:\n\n-   Configure autoscaling — see the `gke-workload-scaling` skill\n-   Set up observability — see the `gke-observability` skill\n-   Harden security — see the `gke-workload-security` skill\n-   Configure reliability (PDBs, topology spread) — see the `gke-reliability`\n    skill\n",{"name":5,"metadata":49,"description":7},{"version":50,"category":51},"1.0.1","Containers","main","bb9b3f464aae37af360d079c1d863524955b0363","skills\u002Fcloud\u002Fgke-app-onboarding",2005,"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills","https:\u002F\u002Fgithub.com\u002Fgoogle","https:\u002F\u002Fopensource.google\u002F","Google ❤️ Open Source","2026-11-14 01:51:35",{"source":8,"skillName":5,"commands":62,"prompt":72,"zipAvailable":73},[63,66,69],{"tool":64,"command":65},"npx","npx skills add google\u002Fskills --skill gke-app-onboarding",{"tool":67,"command":68},"bunx","bunx skills add google\u002Fskills --skill gke-app-onboarding",{"tool":70,"command":71},"pnpm","pnpm dlx skills add google\u002Fskills --skill gke-app-onboarding","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002FSKILL.md",true,[75,81,85,91,95,99,105],{"path":76,"resourceType":77,"resourceTypeDesc":78,"sizeBytes":79,"sourceHtmlUrl":80},"assets\u002Fdeployment.yaml","ASSET","资产文件",1942,"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002Fassets\u002Fdeployment.yaml",{"path":82,"resourceType":77,"resourceTypeDesc":78,"sizeBytes":83,"sourceHtmlUrl":84},"assets\u002FDockerfile",531,"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002Fassets\u002FDockerfile",{"path":86,"resourceType":87,"resourceTypeDesc":88,"sizeBytes":89,"sourceHtmlUrl":90},"assets\u002Findex.js","SCRIPT","脚本",863,"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002Fassets\u002Findex.js",{"path":92,"resourceType":77,"resourceTypeDesc":78,"sizeBytes":93,"sourceHtmlUrl":94},"assets\u002Fpackage-lock.json",193,"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002Fassets\u002Fpackage-lock.json",{"path":96,"resourceType":77,"resourceTypeDesc":78,"sizeBytes":97,"sourceHtmlUrl":98},"assets\u002Fpackage.json",125,"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002Fassets\u002Fpackage.json",{"path":100,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":103,"sourceHtmlUrl":104},"references\u002Fattribution.md","REFERENCE","参考文档",1894,"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002Freferences\u002Fattribution.md",{"path":106,"resourceType":101,"resourceTypeDesc":102,"sizeBytes":107,"sourceHtmlUrl":108},"references\u002Fgo-example.md",2045,"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fgke-app-onboarding\u002Freferences\u002Fgo-example.md",[110,148,177,206,233,257],{"skillNo":111,"name":112,"nameZh":6,"description":113,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":114,"categories":115,"keywords":124,"publishedAt":44},"01M6998S2EZKD3GEJ7F943RZTE","sign-in-with-google-web","Implement, configure, and secure Sign In With Google (SiwG) using Google Identity Services (GIS \u002F `https:\u002F\u002Faccounts.google.com\u002Fgsi\u002Fclient`) across web architectures. Use when creating Google sign-in buttons, implementing Google One Tap with FedCM, integrating GIS in React\u002FNext.js\u002FAngular\u002FHTML, verifying ID tokens on backend runtimes (Python\u002FNode.js\u002FGo\u002FJava), enforcing Google Workspace domain restrictions (`hd`), securing client-side ID tokens via WebCrypto nonces or encrypted IndexedDB, embedding in cross-origin iframes via the Intermediate Iframe API (`https:\u002F\u002Faccounts.google.com\u002Fgsi\u002Fintermediate`), configuring Content Security Policy (CSP), COOP, and Permissions Policy (`identity-credentials-get`) headers, or handling sign-out and revocation. Don't use for legacy Google Sign-In (`gapi.auth2`), Google Cloud IAM service accounts, or Android\u002FiOS native Credential Manager.","https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fidentity\u002Fsign-in-with-google-web\u002FSKILL.md",[116,121],{"categoryNo":117,"categoryName":118,"taxonomyType":119,"taxonomyTypeDesc":120},"01JBSEEDCAT000000000000009","前端开发","SCENARIO","使用场景",{"categoryNo":122,"categoryName":123,"taxonomyType":119,"taxonomyTypeDesc":120},"01JBSEEDCAT000000000000010","后端与接口",[9,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147],"sign in with google web","sign","with","web","android","go","security","google workspace","google cloud","implement","policy","python","implementing","react","iam","permissions","buttons","secure","manager","identity","architectures","domain","runtimes",{"skillNo":149,"name":150,"nameZh":6,"description":151,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":152,"categories":153,"keywords":161,"publishedAt":44},"01M6998PHPDCAD684VW5WRG83D","dpop-adoption","Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform. Use when configuring non-extractable asymmetric key pairs (P-256), generating DPoP Proof JWTs for authorization code exchange and token refresh, or handling 400 use_dpop_nonce challenge retry loops at oauth2.googleapis.com\u002Ftoken. Don't use for unconstrained OAuth 2.0 flows (where refresh tokens are not bound to a client key pair), or for Google Cloud IAM \u002F service account authentication.","https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fidentity\u002Fdpop-adoption\u002FSKILL.md",[154,155,158],{"categoryNo":122,"categoryName":123,"taxonomyType":119,"taxonomyTypeDesc":120},{"categoryNo":156,"categoryName":157,"taxonomyType":119,"taxonomyTypeDesc":120},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":159,"categoryName":160,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000030","开发工程师",[162,163,9,133,164,165,166,167,168,169,139,170,171,172,173,174,175,144,147,176,28],"dpop adoption","adoption","es6","retry","authentication","flows","challenge","code","browser","loops","at","node","token","pair","platform",{"skillNo":178,"name":179,"nameZh":6,"description":180,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":181,"categories":182,"keywords":189,"publishedAt":44},"01M6998M72TC73EEAQH4XC7EXW","retrieving-developer-knowledge","Searches, retrieves, and synthesizes official Google developer documentation across Google Cloud, AI\u002FGemini, Android, Chrome, Web, Flutter, Go, Firebase, and other Google developer platforms. Integrates with the Developer Knowledge MCP server (search_documents, get_documents, answer_query) or the Developer Knowledge REST API fallback. Use when searching for gcloud CLI commands, API syntax, IAM permissions, official documentation, architectural comparisons, or product choice overviews. Don't use for local filesystem lookups or non-Google documentation.","https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fdevelopers\u002Fretrieving-developer-knowledge\u002FSKILL.md",[183,184,187,188],{"categoryNo":122,"categoryName":123,"taxonomyType":119,"taxonomyTypeDesc":120},{"categoryNo":185,"categoryName":186,"taxonomyType":119,"taxonomyTypeDesc":120},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":156,"categoryName":157,"taxonomyType":119,"taxonomyTypeDesc":120},{"categoryNo":159,"categoryName":160,"taxonomyType":21,"taxonomyTypeDesc":22},[190,191,192,193,133,194,195,196,197,198,199,200,201,28,202,203,204,139,205,140],"retrieving developer knowledge","knowledge","developer","MCP","mcp server","official","developer documentation","get","search","local","choice","documents","query","api","across","documentation",{"skillNo":207,"name":208,"nameZh":6,"description":209,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":210,"categories":211,"keywords":212,"publishedAt":44},"01M6998J2CZEXS9BES9S3WWFKC","migrate-to-rust","Clones, analyzes, plans, and migrates legacy codebases (C++, Fortran, Java, Python, C, Shell) from a GitHub URL or local directory to a modern, high-performance, deterministic, 100% Safe Rust architecture, tracking live telemetry across every task bucket, test failure\u002Ffix cycle, and Profile-Guided Optimization (PGO) stage, and producing a first-person AI storytelling report and interactive HTML infographic. Use when migrating a GitHub repository or local codebase to Rust, porting legacy C++, Fortran, Python, or Java workloads to memory-safe Rust, designing Struct-of-Arrays (SoA) or SIMD Rust architectures, or optimizing Rust ports with LLVM PGO. Don't use for unrelated non-Rust refactoring or single-line syntax questions.","https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fdevelopers\u002Fmigrate-to-rust\u002FSKILL.md",[],[213,214,215,216,217,218,219,220,136,221,222,223,224,225,226,199,227,228,229,28,230,231,204,232],"migrate to rust","rust","migrate","github","memory","performance","directory","safe","ports","llvm","soa","cycle","porting","fix","arrays","infographic","high-performance","URL","architecture","unrelated",{"skillNo":234,"name":235,"nameZh":6,"description":236,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":237,"categories":238,"keywords":242,"publishedAt":44},"01M6998GCC3K29WZ82KXMB9E02","finding-google-skills","Google platform decision and setup guidance, loaded on demand from Google's skill catalog. Use when a developer is choosing or setting up part of their stack, such as where to run a service, a database, storage, messaging, authentication, analytics, ads, or AI model serving, and a Google product is a reasonable candidate - whether or not a vendor is named - or when a request names a Google product or API. Brings in the matching Google skill so the answer can weigh Google options, their trade-offs, and when they are not the right fit. Skip when the stack is already settled on another provider and no Google product is named, or the task involves no platform choice.","https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fdevelopers\u002Ffinding-google-skills\u002FSKILL.md",[239,240,241],{"categoryNo":122,"categoryName":123,"taxonomyType":119,"taxonomyTypeDesc":120},{"categoryNo":156,"categoryName":157,"taxonomyType":119,"taxonomyTypeDesc":120},{"categoryNo":159,"categoryName":160,"taxonomyType":21,"taxonomyTypeDesc":22},[9,243,244,245,246,176,247,248,249,250,251,166,252,253,254,200,40,255,28,256,203],"finding google skills","storage","as","messaging","model","trade-offs","provider","answer","fit","catalog","up","decision","database","candidate",{"skillNo":258,"name":259,"nameZh":6,"description":260,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":261,"categories":262,"keywords":265,"publishedAt":44},"01M6998DWNHTH0BS6W1CY8ZXMP","workload-manager-basics","Use this skill to manage Google Cloud Workload Manager evaluations, rules, scanned resources, and validation results by using public client libraries and the REST API. Use when you need to inspect workload best-practice rules, create and run evaluations for Google Cloud general best practices, SAP, SQL Server, or custom organizational rules, review violations, export results to BigQuery, or automate Workload Manager through client libraries because no service-specific public CLI or MCP server is available. Don't use for general Google Compute Engine instance management, VPC configuration, or standard IAM auditing.","https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fcloud\u002Fworkload-manager-basics\u002FSKILL.md",[263,264],{"categoryNo":122,"categoryName":123,"taxonomyType":119,"taxonomyTypeDesc":120},{"categoryNo":156,"categoryName":157,"taxonomyType":119,"taxonomyTypeDesc":120},[266,267,143,37,9,193,268,133,194,269,270,271,272,28,273,203,139,274,275,276,277],"workload manager basics","workload","cli","review","vpc","resources","inspect","you","create","libraries","server","run"]