Skip to content
Get packs

Filestore Auditing

Audits Google Cloud Filestore shares for backup gaps, risky NFS export rules and zone isolation.

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
6 files

What it does

Once installed, the agent can review a Google Cloud project's Filestore file shares (managed network file storage) and report which ones lack recent backups, which NFS export rules are overly open (such as 0.0.0.0/0 access or missing ROOT_SQUASH), and whether zone isolation settings meet reliability guidelines. It produces a scorecard and inventory table, and it asks for confirmation before creating any backups. Reference notes explain these concepts in plain terms.

Great for

  • Cloud administrators who want a periodic health and security check of Filestore storage across projects
  • Platform or DevOps engineers preparing for a disaster recovery or compliance review
  • Anyone who needs an explanation of Filestore NFS export risks and zone isolation options

Skip it if

  • Cloud Storage buckets, Persistent Disk or NetApp Volumes, which the skill explicitly excludes; using it there would give wrong results
  • Production projects where the agent might run backup creation without careful review, since the skill can create backups once the user confirms
  • Users without IAM permissions for Filestore, because the audit will fail or return partial data

Try asking

  • “Audit all Filestore instances in project my-project for missing or stale backups and give me a scorecard”
  • “Check our NFS export rules for overly permissive access or missing ROOT_SQUASH”
  • “Explain what Physical Zone Isolation means for my Filestore instances, without running any commands”
  • “Which of our file shares are unprotected, and what backup commands would fix that?”
Step-by-step guide: how to use Filestore AuditingInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 6 original files, the Apache-2.0 licence and an attribution note.

    google-cloud-filestore-auditing.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip google-cloud-filestore-auditing.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip google-cloud-filestore-auditing.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Use a read-only account (roles/file.viewer) for assessments and only grant editor rights when you intend to create backups.
  • Specify the target project ID explicitly so the audit covers the right environment.
  • Review the proposed backup commands before confirming, since backups incur cost and the agent should not act without your approval.

What's inside

  • references/audit-rules-matrix.md
  • references/backup-dr-governance.md
  • references/security-access-governance.md
  • references/zone-isolation-pzi-pzs.md
  • scripts/filestore_audit.py
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.