gcp

Identify GCP infrastructure and IAM roles using read-only gcloud commands.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/d3fvxl/.dotfiles --skill gcp-d3fvxl
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gcp
Source: https://github.com/d3fvxl/.dotfiles/tree/main/config/opencode-efg/skills/gcp
Command: npx skills add https://github.com/d3fvxl/.dotfiles --skill gcp-d3fvxl

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Query and audit Google Cloud Platform infrastructure using gcloud CLI in a strictly READ-ONLY mode to avoid accidental state changes, while providing clear context and guardrails.

Core Features & Use Cases

  • Read-only infrastructure exploration across Compute Engine, GKE, Cloud SQL, VPC, and other GCP services using gcloud and gsutil with safe, parseable outputs.
  • Explicit governance: prompts for user approval before any operation that could modify state, and project-context checks before queries.
  • Quick start guidance and example workflows for incident investigations, onboarding, and compliance reviews.

Quick Start

Ask the AI to run read-only gcloud queries to enumerate current GCP resources and IAM policies with JSON output.

Frequently Asked Questions about gcp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit GCP infrastructure configuration without making accidental changes?

You can audit GCP infrastructure safely by running strictly read-only gcloud commands to query configurations across Compute Engine, GKE, Cloud SQL, and networking, ensuring no state changes occur during the investigation.

What is the best way to check IAM roles during a GCP incident investigation?

The best way to check IAM roles during an incident is to use read-only gcloud queries that enumerate current IAM policies with parseable JSON output, providing clear context without risking further state modifications.

Does this approach support read-only exploration across both GKE and Cloud SQL setups?

Yes, read-only gcloud exploration supports both GKE and Cloud SQL setups, allowing you to enumerate current resource configurations and IAM policies across multiple GCP services using safe, parseable outputs.

How do I get started querying VPC networking details for onboarding?

To start querying VPC networking details for onboarding, ask the AI to run read-only gcloud commands, which will perform project-context checks first and return safe, parseable outputs of your current infrastructure.

What are the limitations if a gcloud command attempts to modify state during a compliance review?

If a gcloud command attempts to modify state during a compliance review, the strict governance limitations will block it, requiring explicit user approval before any operation that could alter your GCP setup can proceed.