菜单
Advanced diagnostics playbook for private VPC connectivity, serverless network bridges, and firewall blocks.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Advanced diagnostics playbook for complex GCP authorization errors, cross-project lookups, and token impersonations.
Guides the agent on how to run clean python styling, Black/Ruff compliance checks, and pytest execution on changed python scripts.
Multi-format visual diagram design and validation playbook. Enforces syntax safety for Mermaid.js and interactive HTML/SVG mapping, utilizing headless verification tools.
Guides the agent on executing static security scanning, auditing code for shell injections, and verifying API credential masks.
This skill should be used when the user wants to "build a frontend for an ADK agent", "connect a client to Vertex AI Reasoning Engine", "parse agent streaming responses", "integrate a browser client", "implement dynamic session creation on GCP", or needs client-side parsing and routing gotchas for GCP Agent Runtime. It compiles the exact schemas, parsing pathways, headers, and FastAPI proxy gotchas.
| name | gcp-network-troubleshooter |
| description | Advanced diagnostics playbook for private VPC connectivity, serverless network bridges, and firewall blocks. |
Use this skill when you encounter connection timeouts, DNS resolution failures, private IP peering blocks, database connection resets, or Serverless VPC Access connector failures.
Before executing any network diagnostics, ensure the required management API is enabled on your project:
gcloud services enable networkmanagement.googleapis.com
Create and execute a Connectivity Test to trace the network path, packet routes, and firewall rules between your service and target IP:
# Example: Test reachability from a Cloud Run revision to a private Cloud SQL IP
gcloud network-management connectivity-tests create cloudrun-to-db-test \
--source-cloud-run-revision=$(gcloud run services list --limit=1 --format="value(REVISION)") \
--destination-ip-address=10.128.0.5 \
--destination-port=5432 \
--protocol=TCP \
--global
Poll and fetch the described results of the Connectivity Test to locate exact packet drop locations or blocked ports:
# Describe test outcomes to locate ingress/egress firewall blocks
gcloud network-management connectivity-tests describe cloudrun-to-db-test --global
Check if native GCP recommender engines have detected overlapping or shadowed firewall rules blocking VPC traffic:
gcloud recommender recommendations list \
--recommender=google.compute.firewall.PolicyRecommender \
--location=global