Skip to content

Data Boundary Framework Navigator

Maps compliance requirements to Google Cloud Data Boundary frameworks and controls

Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
8 files

What it does

When installed, the agent acts as a compliance analyst for Google Cloud Assured Workloads. Given a plain-language description of data residency or regulatory needs, it matches them to built-in Data Boundary Frameworks and cloud controls, scores how well each matches, and recommends which to apply, preferring built-in options over custom ones. It uses gcloud commands and bundled Python scripts to read the framework catalog and produce a structured report.

Great for

  • Cloud architects planning a Google Cloud deployment with data residency or regulatory requirements
  • Compliance teams comparing which built-in Data Boundary Frameworks fit a workload
  • Developers who need the exact gcloud steps to enable and query Assured Workloads compliance resources

Skip it if

  • General compliance posture checks outside Data Boundary frameworks, which the skill says to leave to Compliance Manager; the skill is scoped to Data Boundary matching only
  • Automated Terraform deployment without a human choosing the framework, which the skill explicitly excludes
  • Legal certification decisions; the output is analyst guidance and should be reviewed by qualified compliance staff

Try asking

  • “Which Google Cloud Data Boundary framework fits an Australian healthcare workload that must keep data in-country?”
  • “Map our requirement for FedRAMP High data residency to the built-in frameworks and show match percentages”
  • “Browse the built-in Data Boundary frameworks available in my organization”
  • “What major requirement gaps remain if we use the IL4 framework for this project?”
Step-by-step guide: how to use Data Boundary Framework NavigatorInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 8 original files, the Apache-2.0 licence and an attribution note.

    assuredworkloads-frameworks-navigator.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip assuredworkloads-frameworks-navigator.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip assuredworkloads-frameworks-navigator.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Describe the workload's location, regulated data type and any named compliance regime (e.g. FedRAMP High, IL4) so the matching is accurate.
  • Review the match percentages and the recommended framework yourself before acting, since the skill's own rules can suggest custom frameworks when the match is below 80 percent.
  • Use a read-only account for the setup steps; the skill only reads framework data, but granting admin roles is unnecessary for browsing.

What's inside

  • assets/locations.json
  • references/attribution.md
  • references/gcloud-commands.md
  • scripts/db_output_match_analyzer_test.py
  • scripts/db_output_match_analyzer.py
  • scripts/db_resources_loader_test.py
  • scripts/db_resources_loader.py
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.