Is it compatible with the gcloud CLI?

Yes, the skill provides specific, copy-pasteable gcloud commands for managing IAM, secrets, and networking tasks.

Does it manage service account keys?

The skill treats service account keys as an anti-pattern and guides users toward more secure alternatives like Workload Identity.

Can I use this for Cloud Run deployments?

Absolutely. It includes specific patterns for configuring VPC access connectors and mounting secrets securely within Cloud Run services.

Does this skill support Terraform?

Yes, it includes standardized patterns and file pattern matching for Terraform (.tf) files targeting Google Cloud resources.

How does this help with GCP security compliance?

It enforces the principle of least privilege for IAM, prohibits basic roles like Owner/Editor, and provides templates for deny-by-default firewall rules.

GCP Services & Security

Name: GCP Services & Security
Author: Agentient

byAgentient

0•

クラウドインフラストラクチャ

Standardizes Google Cloud Platform infrastructure by implementing security-first IAM policies, secret management, and hardened network configurations.

This skill provides Claude with specialized expertise for managing Google Cloud Platform (GCP) environments using the principle of least privilege. It guides the creation of service accounts with granular permissions, manages sensitive data via Secret Manager with version pinning, and architect's custom VPC networks with deny-by-default firewall rules. By codifying best practices for both gcloud CLI and Terraform, it helps developers and DevOps engineers avoid common security pitfalls like using basic roles, service account keys, or default VPC configurations.

主な機能

01Custom VPC and subnet configuration with hardened firewall rule templates

02Secure Secret Manager integration with version pinning and access control

03Infrastructure-as-Code (Terraform) pattern validation for GCP resources

04Cloud Run deployment optimization using VPC connectors and secure secret mounting

05Automated IAM service account creation with least-privilege role binding

060 GitHub stars

ユースケース

01Migrating application secrets from insecure environment variables to Google Secret Manager

02Hardening IAM permissions by replacing legacy Editor roles with granular predefined roles

03Provisioning production-ready GCP environments for microservices with isolated networking

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add agentient/vibekit gcp-services

For use in Claude.ai and ChatGPT

Download Skill