원클릭으로 Manus에서 모든 스킬 실행

gcp

스타19

포크6

업데이트2026년 5월 31일 22:00

Google Cloud Platform (GCP) best practices. Use when provisioning GCP infrastructure, configuring IAM, deploying to Cloud Run, GKE (Kubernetes Engine), Cloud Functions, Cloud SQL, or managing BigQuery. Do NOT trigger for generic "deploy my app" requests without clarifying the target platform.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

neverinfamous

neverinfamous/memory-journal-mcp

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Google Cloud Platform (GCP) Best Practices

STOP. Your knowledge of GCP may be outdated. Prefer retrieval over pre-training for any version-sensitive GCP configuration. Fetch current documentation when in doubt.

Guidelines for architecting and deploying secure, scalable applications on GCP.

1. Identity and Access Management (IAM)

Service Accounts: Do not use the default Compute Engine service account. Create dedicated, narrowly-scoped service accounts for each application (Cloud Run, GKE node pool, Cloud Function).
Workload Identity: Always use Workload Identity (for GKE) or Workload Identity Federation (for GitHub Actions/CI) instead of generating and storing long-lived JSON service account keys.
Least Privilege: Grant roles at the lowest level possible (Resource level > Project level > Folder level).

2. Serverless (Cloud Run & Cloud Functions)

Cloud Run: Prefer Cloud Run over Cloud Functions for containerized applications. It supports multi-concurrency (handling multiple requests per instance), which significantly lowers costs and cold starts.
Scaling: Configure minimum instances (min-instances) to 1 or more for latency-sensitive applications to mitigate cold starts. Ensure max-instances is set to prevent runaway billing.

3. Data and Storage (Cloud SQL, Cloud Storage, BigQuery)

Cloud SQL: Use private IPs for Cloud SQL instances. Connect to them using the Cloud SQL Auth Proxy or Serverless VPC Access connectors rather than exposing them to the public internet.
Cloud Storage: Enforce Uniform Bucket-Level Access to manage permissions solely via IAM, disabling legacy ACLs. Enable object versioning for critical buckets to protect against accidental overwrites/deletes.
BigQuery: Always partition and cluster large BigQuery tables to minimize query costs (BigQuery charges per byte processed).

4. Networking and Security

VPC Service Controls: Use VPC SC to create secure perimeters around sensitive data (e.g., preventing data exfiltration from Cloud Storage or BigQuery).
Cloud Armor: Attach Google Cloud Armor to Global HTTP(S) Load Balancers to defend against DDoS attacks and implement WAF (Web Application Firewall) rules.

5. Infrastructure as Code

Terraform: Use Terraform as the primary IaC tool for GCP. Store the Terraform state in a centralized, version-enabled Cloud Storage bucket with state locking enabled.

이 저장소의 다른 Skills

같은 저장소

adversarial-performance

neverinfamous/memory-journal-mcp

Multi-pass adversarial performance audit for entire repositories. Combines structured profiling (Agent A) with adversarial stress-testing critique (Agent B) through iterative passes. Optimize repo/backend performance, hot-paths, build size, and server throughput. Do NOT use for frontend page load metrics or Lighthouse audits (use web-perf). NOT for frontend Core Web Vitals (use web-perf).

2026-05-3119

adversarial-planner

neverinfamous/memory-journal-mcp

Multi-pass adversarial planning and review skill that improves agent-generated plans through structured critique stages. Combines an initial planning agent (structure, logic, task sequencing) with an adversarial review agent (performance, security, maintainability) and a final Copilot extension validation pass. Use when creating implementation plans, designing architecture, planning roadmaps or milestones, or when the user says "plan this", "review my plan", "adversarial review", or "multi-pass plan".

2026-05-3119

adversarial-security

neverinfamous/memory-journal-mcp

Multi-pass adversarial security audit for entire repositories. Combines structured threat modeling (Agent A) with adversarial attack surface analysis (Agent B) through iterative passes. Merges the security-audit workflow's 10-category checklist with the adversarial-planner's structured critique methodology. Use when running security audits, threat modeling, or when the user says "security audit", "adversarial security", "threat model this repo", "red team this repo", or "find vulnerabilities". NOT for fixing or remediating known security issues (use autonomous-dev instead). NOT for supply chain dependency scanning. NOT for general workflow audits or code quality. If user says 'fix security issues', ask whether they want to audit first or fix known issues.

2026-05-3119

adversarial-skill-audit

neverinfamous/memory-journal-mcp

Multi-pass adversarial quality audit for agent skill directories. Combines structured evaluation with adversarial stress-testing to assess skill completeness, instruction clarity, trigger accuracy, and security. Use when auditing a skills directory.

2026-05-3119

adversarial-workflow-audit

neverinfamous/memory-journal-mcp

Multi-pass adversarial quality audit for flat markdown workflow files. Combines structured evaluation (Agent A) with adversarial stress-testing (Agent B) to assess sequential clarity, prerequisite validation, HITL (Human-in-the-loop) safety gates, loop prevention, and formatting. Use when auditing workflow scripts (e.g., slash-commands like /bump-deploy), or when the user asks to review or improve operational playbooks.

2026-05-3119

mcp-builder

neverinfamous/memory-journal-mcp

Core rules for code quality and specifications of Model Context Protocol (MCP) servers. Use when reviewing MCP code quality, enforcing specification rules, or checking schemas/error responses. Must see the explicit keyword "MCP" or "Model Context Protocol". NOT for general REST APIs or Cloudflare Workers. Do NOT trigger for generic 'build a server' requests unless the type is explicitly specified as an MCP server. (Invoke explicitly with `/mcp-builder` — does not auto-trigger).

2026-05-3119

name	gcp
description	Google Cloud Platform (GCP) best practices. Use when provisioning GCP infrastructure, configuring IAM, deploying to Cloud Run, GKE (Kubernetes Engine), Cloud Functions, Cloud SQL, or managing BigQuery. Do NOT trigger for generic "deploy my app" requests without clarifying the target platform.

Google Cloud Platform (GCP) Best Practices

STOP. Your knowledge of GCP may be outdated. Prefer retrieval over pre-training for any version-sensitive GCP configuration. Fetch current documentation when in doubt.

Guidelines for architecting and deploying secure, scalable applications on GCP.

1. Identity and Access Management (IAM)

Service Accounts: Do not use the default Compute Engine service account. Create dedicated, narrowly-scoped service accounts for each application (Cloud Run, GKE node pool, Cloud Function).
Workload Identity: Always use Workload Identity (for GKE) or Workload Identity Federation (for GitHub Actions/CI) instead of generating and storing long-lived JSON service account keys.
Least Privilege: Grant roles at the lowest level possible (Resource level > Project level > Folder level).

2. Serverless (Cloud Run & Cloud Functions)

Cloud Run: Prefer Cloud Run over Cloud Functions for containerized applications. It supports multi-concurrency (handling multiple requests per instance), which significantly lowers costs and cold starts.
Scaling: Configure minimum instances (min-instances) to 1 or more for latency-sensitive applications to mitigate cold starts. Ensure max-instances is set to prevent runaway billing.

3. Data and Storage (Cloud SQL, Cloud Storage, BigQuery)

Cloud SQL: Use private IPs for Cloud SQL instances. Connect to them using the Cloud SQL Auth Proxy or Serverless VPC Access connectors rather than exposing them to the public internet.
Cloud Storage: Enforce Uniform Bucket-Level Access to manage permissions solely via IAM, disabling legacy ACLs. Enable object versioning for critical buckets to protect against accidental overwrites/deletes.
BigQuery: Always partition and cluster large BigQuery tables to minimize query costs (BigQuery charges per byte processed).

4. Networking and Security

VPC Service Controls: Use VPC SC to create secure perimeters around sensitive data (e.g., preventing data exfiltration from Cloud Storage or BigQuery).
Cloud Armor: Attach Google Cloud Armor to Global HTTP(S) Load Balancers to defend against DDoS attacks and implement WAF (Web Application Firewall) rules.

5. Infrastructure as Code

Terraform: Use Terraform as the primary IaC tool for GCP. Store the Terraform state in a centralized, version-enabled Cloud Storage bucket with state locking enabled.