Skip to content
Get packs

Agent Gateway Multi-Agent Security

Design and configure Google Cloud Agent Gateway ingress and egress security for multi-agent systems

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
15 files

What it does

When installed, this skill gives an AI agent a detailed playbook for securing AI agents running on Google Cloud. It guides the agent to draft a security architecture for traffic coming into agents and going out from them, and to produce config files for Agent Gateway, Model Armor (content filtering for prompt injection and sensitive data), and IAP (access policies). It also includes deployment scripts that run gcloud commands to enable APIs and import these configurations into a Google Cloud project.

Great for

  • Cloud engineers building multi-agent systems on Google Cloud who need gateway-level guardrails
  • Security teams reviewing or drafting Agent Gateway, Model Armor, and IAP policy configurations
  • Developers who want starter YAML and JSON templates for agent ingress and egress policies

Skip it if

  • Generic load balancing or basic VPC setup unrelated to Agent Gateways, which the skill itself says it should not handle
  • Anyone expecting a turnkey, verified production deployment: the configs are templates with placeholder values (for example gke-tools.example.com and 10.0.1.50), and the skill is not tested against your environment
  • Running the scripts against a production project without reviewing them first, since they make real changes to cloud resources and billing-relevant services

Try asking

  • “Design a dual ingress and egress architecture for three agents (billing, support, fraud) behind Agent Gateway with Model Armor”
  • “Generate agw-ingress-config.yaml and agw-egress-config.yaml for an MCP tool backend over private service connect”
  • “Write an IAP policy that only lets an agent call read-only tools like get_account_balance”
  • “Create a Model Armor config with prompt injection, jailbreak and sensitive data protection filters set to ENFORCE”
Step-by-step guide: how to use Agent Gateway Multi-Agent SecurityInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 15 original files, the Apache-2.0 licence and an attribution note.

    google-cloud-solution-multi-agent-security.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip google-cloud-solution-multi-agent-security.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip google-cloud-solution-multi-agent-security.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Review every script and YAML file before running it; deploy_infrastructure.sh enables services and imports gateways into a real project, so test in a sandbox project first
  • Replace placeholder hostnames, IP addresses and zone names with your own values before applying anything
  • Note that SKILL.md references scripts/verify_egress_policies.py, which is not among the listed files, so check it exists before following that step

What's inside

  • assets/agw-authz-extension.yaml
  • assets/agw-authz-policy.yaml
  • assets/agw-egress-config-run.yaml
  • assets/agw-egress-config.yaml
  • assets/agw-ingress-config.yaml
  • assets/iap-policy-multi-agent.json
  • assets/iap-policy.json
  • assets/model-armor-advanced.yaml
  • assets/model-armor-config.yaml
  • assets/model-armor-payload.json
  • assets/sgp-policy.yaml
  • references/attribution.md
  • scripts/create_gke_dns_record.sh
  • scripts/deploy_infrastructure.sh
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.