AGENT SKILL

google-cloud-solution-agentic-analytics-spark-knowledge-catalog

Discovers requirements and designs an end-to-end governed agentic analytics solution using Knowledge Catalog and Managed Service for Apache Spark (Lightning Engine). Use when designing data science and analytics workflows across structured and unstructured distributed data (including in S3, Azure Blob, AlloyDB, and Iceberg), establishing metadata governance with Knowledge Catalog aspect types, or grounding agentic IDEs (VS Code, Antigravity) by using the Google Cloud Data Agent Kit. Don't use for provisioning borderless data lakehouse infrastructure (use google-cloud-solution-agentic-ai-borderless-data-lakehouse instead).

License 许可
Apache-2.0
所属仓库
google/skills
最近更新
2026-11-11
Stars
★ 2.4w
Forks
2.0k

01 前言 Front Matter

name
google-cloud-solution-agentic-analytics-spark-knowledge-catalog
metadata
{ "version": "1.0.2", "category": "MultiProductSolutions" }
description
Discovers requirements and designs an end-to-end governed agentic analytics solution using Knowledge Catalog and Managed Service for Apache Spark (Lightning Engine). Use when designing data science and analytics workflows across structured and unstructured distributed data (including in S3, Azure Blob, AlloyDB, and Iceberg), establishing metadata governance with Knowledge Catalog aspect types, or grounding agentic IDEs (VS Code, Antigravity) by using the Google Cloud Data Agent Kit. Don't use for provisioning borderless data lakehouse infrastructure (use google-cloud-solution-agentic-ai-borderless-data-lakehouse instead).

02 资源文件 5

03 SKILL.md 正文

Agentic analytics across cloud providers and data types

This skill provides a workflow to design and implement a governed, secure pipeline for agentic analytics solution across structured and unstructured data that's distributed across Google Cloud, on-premises systems, and other cloud providers.

Attribution

MUST READ: Before executing any gcloud, REST API, or MCP command, you MUST read and follow the instructions in Usage Attribution.

Overview of the workflow

The workflow consists of the following phases:

  • Phase 1: Requirements discovery. Gather detailed requirements related to the cloud workload or use case that the user needs assistance for.
  • Phase 2: Solution architecture. Use the requirements that were gathered in Phase 1 to generate a detailed solution architecture for the cloud workload or use case.
  • Phase 3: Solution validation. Create a plan to validate the generated solution, generate validation instructions and scripts, and run the validation.
  • Phase 4: Solution packing and presentation. Consolidate the generated content and present the solution.

Important notes about the workflow:

  • Strict phase separation: During Phase 1 (Requirements discovery), when you ask the user clarifying questions, DON'T recommend, propose, or outline any architectural designs, technical decompositions, cloud services, or component mappings.
  • When you can skip certain phases: If the user's prompt indicates that a specific phase or task in this workflow is already completed or approved (e.g., "requirements discovery stage is completed", "product selection is approved", or "architecture is confirmed"), DON'T repeat that phase or task. Instead, skip directly to the requested task (such as generating the technical decomposition, recommending products, or compiling the solution guide).

Phase 1: Requirements discovery and analysis

  1. Request the user to describe the functional requirements (business processes, activities, and use cases) of their workload. Ask the user the following questions, one question at a time:

    • What are your primary inventory data sources? Are they unstructured (e.g., PDF flavor recipes, invoices) or structured (e.g., historical sales in Iceberg)?
    • Where are these sources hosted? Are they split across AWS S3, Azure Blob, Google Cloud Storage, or databases like AlloyDB?
    • How do you manage and federate metadata across your data sources within Google Cloud and in external locations (such as other cloud providers)?
    • What are your analytical and computational requirements to join, clean, and run forecast models over large-scale distributed data?
    • What types of natural language prompts do your data scientists or operational agents expect to execute in their agentic IDE (VS Code or Antigravity IDE)?
  2. Request the user to describe the non-functional requirements of their workload.

    The following are examples of questions you can ask to gather non-functional requirements:

    • Security, privacy, and compliance: What data privacy rules, regulatory compliance (e.g., GDPR, HIPAA), or data governance requirements must the system adhere to?
    • Reliability: What are your uptime, high-availability, fault-tolerance, and disaster recovery objectives (RTO/RPO)?
    • Performance: What target query latencies and SLA expectations does your workload require?
    • Operations: What operational monitoring metrics do your data scientists and engineers need?
    • Cost & Sustainability: Do you have specific budget constraints and data egress/transfer cost requirements?
  3. Ask the user whether the workload currently runs on other cloud providers or on-premises.

    • If the user answers "yes", then ask the user to describe the architecture of the current deployment.
    • If the user answer "no", then proceed to the next step.
  4. Request the user to describe dependencies, if any, on other workloads, products, or tools. The following are examples of questions that you can ask to get information about the dependencies:

    • Do you have any upstream or downstream dependencies on external systems (e.g., identity providers, data curation platforms, CI/CD pipelines, or active data catalogs)?
    • Are there any requirements for your general data-engineering software delivery lifecycle (e.g., version control, testing, data quality assurance)? Provide the path to a directory or examples of these artifacts.
  5. Review the input that the user has provided so far, and check whether there are any ambiguities or contradictions.

    If you identify any ambiguities or contradictions in the requirements that the user has provided (e.g., zero-copy vs copying data to a repository), then do the following for each ambiguity or contradiction that you identify:

    • Describe the ambiguity or contradiction (e.g., explain why copying data contradicts the zero-copy requirement and also incurs data-transfer costs).
    • Ask the user how they wish to resolve the ambiguity or contradiction.
      • If the user delegates the choice to you (e.g., the user replies with "do what you think is best" or "you decide"), then provide a clear suggestion to resolve the ambiguity or contradiction (e.g., suggest prioritizing zero-copy remote queries), explain your reasoning (e.g., to eliminate multi-cloud fees and data duplication), and ask the user to approve your suggestion.

    Critical: Until all the ambiguities and contradictions that you identify are resolved according to the preceding guidance, you must NOT recommend or generate any architecture design, technical decomposition, or Google Cloud product recommendations.

  6. Important: DON'T start this step if there are unresolved contradictions or ambiguities from Step 5.

    Generate a technical decomposition of the components of the workload.

    • The technical decomposition must break down the solution into logical components.
    • The decomposition MUST address role-based security and credentials within the relevant layers.
    • The decomposition MUST be organized under the following four layers, which represent a standard architectural pattern for agentic analytics solutions, flowing from user interaction through data context and governance to core data processing:
      • User-interaction layer (IDE): e.g., agentic development environment.
      • Grounding and trusted data: e.g., foundation model, MCP servers, and data warehouse in the cloud.
      • Metadata curation: e.g., metadata scanning.
      • Data processing and analytics: e.g., analytics workflows, Spark data processing, and external data stores.
  7. Request the user to approve the generated technical decomposition.

  8. If the user requests changes, then generate an updated technical decomposition.

  9. Repeat steps 5 through 8 until the user approves the generated technical decomposition.

  10. After the user approves the technical decomposition, proceed to Phase 2. Important: Don't proceed to the next phase until the user approves the generated technical decomposition of the workload.

Phase 2: Solution architecture

Ground all generated content

For each task in this phase, to ensure that the generated content aligns with the latest and official Google Cloud guidance, ground the generated content by using the following resources:

Task 2.1: Identify Google Cloud products and features required for the workload.

  1. For each component in the confirmed technical decomposition, identify the appropriate Google Cloud products and features, based on the guidance in the following resources and adjusted suitably based on the approved technical decomposition:
    • references/product-selection-guidance.md
    • https://github.com/google/skills/blob/main/skills/cloud/google-cloud-solution-architecture/references/decision-making-guides.md
  2. Present the generated product recommendations and ask the user to approve the recommendations.
  3. If the user requests changes, then make the required changes.
  4. Repeat steps 2 and 3 until the user approves the product recommendations.
  5. After the user approves the product recommendations, proceed to Task 2.2.

Task 2.2: Generate an architecture diagram.

  1. Generate an architecture diagram in Mermaid format: https://github.com/mermaid-js/mermaid.
  2. Present the generated diagram to the user and ask the user to approve the architecture diagram.
  3. If the user requests changes, then make the required changes.
  4. Repeat steps 2 and 3 until the user approves the architecture diagram.
  5. After the user approves the architecture diagram, proceed to Task 2.3.

Task 2.3: Generate an architecture description.

  1. Generate a description that explains the purpose of each component, the relationships between the components, and the task flow or data flow.
  2. Present the generated architecture description to the user and ask the user to approve the description.
  3. If the user requests any changes, then make the required changes.
  4. Repeat steps 2 and 3 until the user approves the architecture description.
  5. After the user approves the architecture description, proceed to Task 2.4.

Task 2.4: Generate design recommendations.

  1. Generate design recommendations and best practices to optimally configure each component in the architecture based on the workload's requirements.

    Important:

    • When you generate design recommendations, consider the following:
      • Functional requirements that were gathered in Phase 1.
      • Non-functional requirements that were gathered in Phase 1.
    • Align the generated design recommendations with the recommendations in references/design-recommendations.md.
    • To generate design recommendations for Knowledge Catalog, use the resources that are listed in references/knowledge-catalog-documentation.md
    • To generate guidance for the non-functional requirements, use the following skills:
      • google-cloud-waf-security
      • google-cloud-waf-reliability
      • google-cloud-waf-cost-optimization
      • google-cloud-waf-operational-excellence
      • google-cloud-waf-performance-optimization
      • google-cloud-waf-sustainability
  2. Present the generated recommendations to the user and ask whether the user needs any changes.

  3. If the user needs changes, then make the required changes.

  4. Repeat steps 2 and 3 until the user confirms that the generated design recommendations meet their requirements.

  5. Proceed to Task 2.5.

Task 2.5: Generate deployment guidance.

  1. Generate deployment guidance, including code and instructions to enable the user to deploy the solution.

    Important:

  2. Present the generated deployment guidance to the user and ask whether the user needs any changes.

  3. If the user requests changes, then make the required changes.

  4. Repeat steps 2 and 3 until the user confirms that the generated deployment guidance meets their requirements.

  5. Proceed to Phase 3.

Phase 3: Solution validation

  1. Create a plan to validate the generated solution. The plan must outline the steps to verify that the generated solution meets the workload's requirements.
  2. Present the validation plan to the user and request feedback or approval.
  3. If the user requests changes, update the plan as required.
  4. Repeat steps 2 and 3 until the user approves the validation plan.
  5. Generate scripts or commands using tools like curl or gcloud to perform the steps in the approved validation plan.
  6. Request permission from the user to perform the validation checks.
  7. If the user gives permission, run the validation checks and troubleshoot any deployment issues.
  8. When all the validation checks pass, proceed to Phase 4.

Phase 4: Solution packaging and presentation

  1. Consolidate the text artifacts that were generated in Phase 2 and Phase 3 into a single Markdown file named solution-architecture-guide.md, based on the template in assets/output-template.md.
  2. Present the consolidated solution-architecture-guide.md to the user.
  3. Request the user's permission to write the code files in the user's workspace.
  4. After the user gives permission, write the code files in the user's workspace.

Supporting resources

04 同仓库更多 Skills

google
google/skills

sign-in-with-google-web

Implement, configure, and secure Sign In With Google (SiwG) using Google Identity Services (GIS / `https://accounts.google.com/gsi/client`) across web architectures. Use when creating Google sign-in buttons, implementing Google One Tap with FedCM, integrating GIS in React/Next.js/Angular/HTML, verifying ID tokens on backend runtimes (Python/Node.js/Go/Java), enforcing Google Workspace domain restrictions (`hd`), securing client-side ID tokens via WebCrypto nonces or encrypted IndexedDB, embedding in cross-origin iframes via the Intermediate Iframe API (`https://accounts.google.com/gsi/intermediate`), configuring Content Security Policy (CSP), COOP, and Permissions Policy (`identity-credentials-get`) headers, or handling sign-out and revocation. Don't use for legacy Google Sign-In (`gapi.auth2`), Google Cloud IAM service accounts, or Android/iOS native Credential Manager.

前端开发后端与接口
★ 2.4w
google
google/skills

dpop-adoption

Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform. Use when configuring non-extractable asymmetric key pairs (P-256), generating DPoP Proof JWTs for authorization code exchange and token refresh, or handling 400 use_dpop_nonce challenge retry loops at oauth2.googleapis.com/token. Don't use for unconstrained OAuth 2.0 flows (where refresh tokens are not bound to a client key pair), or for Google Cloud IAM / service account authentication.

开发工程师后端与接口Skill与智能体开发
★ 2.4w
google
google/skills

retrieving-developer-knowledge

Searches, retrieves, and synthesizes official Google developer documentation across Google Cloud, AI/Gemini, Android, Chrome, Web, Flutter, Go, Firebase, and other Google developer platforms. Integrates with the Developer Knowledge MCP server (search_documents, get_documents, answer_query) or the Developer Knowledge REST API fallback. Use when searching for gcloud CLI commands, API syntax, IAM permissions, official documentation, architectural comparisons, or product choice overviews. Don't use for local filesystem lookups or non-Google documentation.

开发工程师后端与接口资料检索与研究
★ 2.4w
google
google/skills

migrate-to-rust

Clones, analyzes, plans, and migrates legacy codebases (C++, Fortran, Java, Python, C, Shell) from a GitHub URL or local directory to a modern, high-performance, deterministic, 100% Safe Rust architecture, tracking live telemetry across every task bucket, test failure/fix cycle, and Profile-Guided Optimization (PGO) stage, and producing a first-person AI storytelling report and interactive HTML infographic. Use when migrating a GitHub repository or local codebase to Rust, porting legacy C++, Fortran, Python, or Java workloads to memory-safe Rust, designing Struct-of-Arrays (SoA) or SIMD Rust architectures, or optimizing Rust ports with LLVM PGO. Don't use for unrelated non-Rust refactoring or single-line syntax questions.

★ 2.4w
google
google/skills

finding-google-skills

Google platform decision and setup guidance, loaded on demand from Google's skill catalog. Use when a developer is choosing or setting up part of their stack, such as where to run a service, a database, storage, messaging, authentication, analytics, ads, or AI model serving, and a Google product is a reasonable candidate - whether or not a vendor is named - or when a request names a Google product or API. Brings in the matching Google skill so the answer can weigh Google options, their trade-offs, and when they are not the right fit. Skip when the stack is already settled on another provider and no Google product is named, or the task involves no platform choice.

开发工程师后端与接口Skill与智能体开发
★ 2.4w
google
google/skills

workload-manager-basics

Use this skill to manage Google Cloud Workload Manager evaluations, rules, scanned resources, and validation results by using public client libraries and the REST API. Use when you need to inspect workload best-practice rules, create and run evaluations for Google Cloud general best practices, SAP, SQL Server, or custom organizational rules, review violations, export results to BigQuery, or automate Workload Manager through client libraries because no service-specific public CLI or MCP server is available. Don't use for general Google Compute Engine instance management, VPC configuration, or standard IAM auditing.

后端与接口Skill与智能体开发
★ 2.4w