Skip to content
Get packs

Assured Workloads Framework Author

Drafts custom cloud controls and customized frameworks for Google Cloud Assured Workloads when built-in ones fall short.

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
3 files

What it does

This skill makes an AI agent act as a compliance architect for Google Cloud's Assured Workloads service, which helps organisations meet data residency and regulatory rules. When built-in controls cannot meet a requirement, the agent drafts new custom cloud controls (written as CEL rules that check cloud resource configurations) and bundles them into a customized framework. It first checks whether existing built-in frameworks already cover the need, and it presents the drafted fields for the user to deploy through the Google Cloud console or commands. Read-only lookups are handed off to a companion navigator skill.

Great for

  • Cloud or compliance engineers who need a data-boundary control that Assured Workloads does not provide out of the box
  • Security teams drafting a customized framework that sits alongside an unmodified built-in framework

Skip it if

  • Simply browsing or mapping existing built-in Assured Workloads frameworks, which the companion navigator skill covers instead
  • Standard regimes such as FedRAMP, HIPAA or PCI-DSS, which the skill itself says are already satisfied by built-in controls, so no custom authoring is needed
  • Anyone wanting a legal or audit sign-off: the output is drafted configuration that still needs expert review

Try asking

  • “Create a custom cloud control that detects Compute Engine VMs created outside our approved regions”
  • “Draft a customized framework bundling our new data-boundary controls next to the built-in framework”
  • “Check whether existing Assured Workloads frameworks already cover our EU data residency requirement before writing anything new”
Step-by-step guide: how to use Assured Workloads Framework AuthorInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the Apache-2.0 licence and an attribution note.

    assuredworkloads-frameworks-author.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip assuredworkloads-frameworks-author.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip assuredworkloads-frameworks-author.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Describe the exact resource types and locations the control must cover, so the CEL rule can be drafted precisely.
  • Review every drafted Name, Description and CEL rule before deploying, since the skill only proposes configuration.
  • Ask for a check against built-in frameworks first to avoid creating controls that duplicate existing coverage.

What's inside

  • references/attribution.md
  • references/gcloud-commands.md
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.