Does this skill require the Google Cloud SDK?

Yes, the safe-gcloud wrapper requires the standard gcloud CLI to be installed and authenticated on your system to execute permitted commands.

Why are my direct gcloud commands being blocked?

This skill enforces a security policy where all Google Cloud commands must pass through a wrapper script to ensure only authorized actions from your allowlist are performed.

Can Claude update the allowlist for me?

No. For security reasons, the allowlist is under user control only. Claude can suggest the correct pattern to add, but it cannot modify the file itself.

How do I add new permissions to the allowlist?

You must manually edit the .claude/gcloud-allowlist.json file in your project root to include the specific command patterns you wish to permit.

What kind of pattern syntax does the allowlist support?

It supports exact matches, command-with-args wildcards (e.g., 'projects list:*'), and service-wide wildcards (e.g., 'compute:*') to provide flexible control.

Safe Google Cloud CLI Wrapper

Name: Safe Google Cloud CLI Wrapper
Author: dhughes

bydhughes

云基础设施

Enforces secure and controlled access to Google Cloud CLI commands within Claude environments using a customizable allowlist.

关于

The safe-gcloud-usage skill provides a critical security layer for managing Google Cloud Platform (GCP) resources through Claude. By routing all gcloud operations through a specialized wrapper script, it ensures that only pre-approved commands—defined in a project-specific allowlist—can be executed. This is ideal for developers who want to harness Claude's power for infrastructure management, project auditing, or service deployment while maintaining strict governance and preventing accidental or unauthorized cloud modifications. The skill handles command validation, provides clear error messaging for blocked actions, and guides users on how to safely expand their permission scope.

主要功能

Command-level allowlist enforcement via JSON configuration
0 GitHub stars
Real-time feedback and pattern suggestions for blocked commands
Seamless integration with existing gcloud CLI configurations
Pattern-based matching for flexible gcloud subcommand permissions
User-controlled security governance for cloud operations

使用场景

Safely managing production environments by scoping allowed gcloud commands per project
Restricting Claude to read-only GCP operations like listing projects or describing instances
Standardizing cloud CLI workflows across teams with shared allowlist patterns

关于

主要功能

Command-level allowlist enforcement via JSON configuration
0 GitHub stars
Real-time feedback and pattern suggestions for blocked commands
Seamless integration with existing gcloud CLI configurations
Pattern-based matching for flexible gcloud subcommand permissions
User-controlled security governance for cloud operations

使用场景

Safely managing production environments by scoping allowed gcloud commands per project
Restricting Claude to read-only GCP operations like listing projects or describing instances
Standardizing cloud CLI workflows across teams with shared allowlist patterns