Skip to content
Get packs

Google Cloud Security Review

Guides security reviews of Google Cloud workloads using the Well-Architected Framework's security pillar

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
2 files

What it does

Once installed, the agent answers Google Cloud security questions using the security pillar of Google's Well-Architected Framework, a set of published best-practice guidance. It asks about your workload, checks it against core security principles and a validation checklist, and suggests prioritized fixes covering identity and access, network security, data protection and operations, naming relevant Google Cloud products such as IAM, Identity-Aware Proxy and Security Command Center.

Great for

  • Engineers reviewing the security posture of a Google Cloud project before launch
  • Teams wanting a structured checklist of IAM, network and data protection gaps
  • Architects who want recommendations tied back to named framework principles

Skip it if

  • Formal compliance audits or certifications, since the skill gives guidance rather than verified assessment (it is not a substitute for an auditor or a scanning tool)
  • Workloads on other cloud providers, which this skill does not cover
  • Incident response on a live breach, where the guidance is general and not tied to your environment's logs

Try asking

  • “Review the security posture of my Cloud Run service that reads from Cloud SQL”
  • “What IAM controls should I put in place for a new GCP data pipeline?”
  • “Which Google Cloud products help with zero trust access to our internal web apps?”
Step-by-step guide: how to use Google Cloud Security ReviewInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the Apache-2.0 licence and an attribution note.

    google-cloud-waf-security.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip google-cloud-waf-security.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip google-cloud-waf-security.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Give the agent a concrete description of your architecture, services and data sensitivity so the questions it asks are useful.
  • Ask for prioritized recommendations and verify product names and settings against current Google Cloud documentation, since the skill links to grounding documents you can read.
  • If you plan to run gcloud or REST commands, the skill requires the agent to follow its attribution instructions first, so review references/attribution.md to see what it does.

What's inside

  • references/attribution.md
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.