Google Data Agent Kit 正式发布，将代理护栏拆分至技能与 IAM
原标题：Google’s Data Agent Kit Hits GA, Splitting Agent Guardrails Between Skills and IAM
AI 摘要
Google 将 Data Agent Kit 正式发布（GA），免费开源，可安装到 Claude Code、Codex、Cursor 等第三方编码代理中，通过 MCP 工具连接 15 个以上 Google Data Cloud 服务，并附带 37 个 Apache 2.0 技能。其安全护栏分为两层：技能层以提示词建议代理在破坏性操作前征得用户同意，IAM 层则通过只读服务账号或 deny policy 强制拦截非只读工具。该设计将治理责任放在 IAM 而非代理本身，但存在被拦截工具仍出现在工具列表中、仅覆盖 Google Cloud MCP 服务等限制。
正文节选
Google recently made Data Agent Kit generally available, moving it out of the preview it ran through the summer. It is free, it is open source, and it installs into coding agents Google does not own. It ships two kinds of control, and the difference matters in production. Data Agent Kit is a set of MCP tools connecting an agent to more than fifteen Google Data Cloud services, plus Google-authored skills that teach it practices like optimizing BigQuery SQL or designing Bigtable row keys. It runs