skills.rest
UnitOneAI
UnitOneAIOFFICIAL
Explore all skills by this author →
WebsiteGitHub

gcp-review

Review Google Cloud configurations against CIS benchmark v2.0.0 and generate prioritized findings.

44|128|Updated Mar 6, 2026
Search Tags:#gcp#infrastructure-as-code#compliance reporting#security posture#cis benchmark#cloud logging#iam hardening
One-click install
npx skills add https://github.com/UnitOneAI/SecuritySkills --skill gcp-review-unitoneai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gcp-review
Source: https://github.com/UnitOneAI/SecuritySkills/tree/main/skills/cloud/gcp-review
Command: npx skills add https://github.com/UnitOneAI/SecuritySkills --skill gcp-review-unitoneai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It eliminates the guesswork in evaluating Google Cloud configurations by producing a structured, benchmark-based security posture assessment that maps findings to specific CIS control and recommendation identifiers with actionable remediation steps.

Core Features & Use Cases

  • CIS benchmark-driven evaluation (v2.0.0): Runs a seven-section assessment across IAM, logging/monitoring, networking, virtual machines, storage, Cloud SQL, and BigQuery.
  • IaC and config-first inspection: Discovers and reviews Terraform, Deployment Manager templates, org policies, IAM bindings, firewall rules, and audit-log related configuration artifacts.
  • Prioritized findings with remediation: Classifies results by severity, outputs compliance-style section scores, and provides a prioritized remediation plan with evidence and fixes.
  • Discovery & targeting: Supports focusing the review on a provided path (files or directories) to streamline audits for new projects, deployments, or changes.
  • Injection-hardening guidance: Treats configuration content as data and ignores embedded attempts to manipulate the reviewer.

Quick Start

Run a CIS-aligned security posture review by instructing the agent: review the contents of the ./infrastructure directory against CIS Google Cloud Platform Foundation Benchmark v2.0.0 and generate the full GCP Security Posture Assessment Report.

Frequently Asked Questions about gcp-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my GCP infrastructure against the CIS benchmark?▼

To check your GCP infrastructure against the CIS benchmark, you can evaluate your Terraform templates and IAM bindings section-by-section. This generates a prioritized findings report mapping gaps to specific CIS control IDs with actionable remediation steps.

Can I run a CIS security review on Terraform files before deploying to Google Cloud?▼

Yes, you can run a pre-deployment CIS security review directly on Terraform files and configuration exports. The assessment discovers IaC artifacts within a specified directory and evaluates hardening baselines before infrastructure changes reach production environments.

What does a GCP CIS benchmark assessment cover?▼

A GCP CIS benchmark assessment covers seven core sections: IAM, logging/monitoring, networking, virtual machines, storage, Cloud SQL, and BigQuery settings. It evaluates firewall rules, org policies, and audit-log configurations to generate compliance scores.

Does the GCP security review support scanning specific directories for infrastructure as code?▼

Yes, the GCP security review supports targeting specific file paths or directories. Providing a targeted path streamlines the audit by focusing the evaluation on relevant IaC files and configuration exports for new projects or deployments.

How are security posture findings prioritized in the compliance report?▼

Security posture findings are prioritized by severity in a structured compliance report. The output includes section-by-section compliance scores, specific configuration evidence, and a remediation plan mapped directly to CIS recommendation IDs for fast resolution.

Will embedded instructions in my IaC files manipulate the security posture review?▼

No, embedded instructions in IaC files will not manipulate the security posture review. The reviewer treats configuration content strictly as data, ignoring any embedded prompt injection attempts to ensure assessment integrity and reliable hardening guidance.

Related Skills

Explore More Software Engineering Skills→
YukiIto1999YukiIto1999

performing-gcp-security-assessment-with-forseti

Audit GCP IAM bindings, firewall rules, storage permissions, and CIS benchmarks.

Community
Advanced
coreymaypraycoreymaypray
1

cloud-security-architect

Audit AWS, Azure, and GCP cloud security posture against CIS benchmarks.

Community
Advanced
thomast1906thomast1906
19

terraform-security-scan

Automate security scanning of Terraform configurations for Azure infrastructure.

Community
Advanced
balsm-healthbalsm-health
2

implementing-cloud-security-posture-management

Automate continuous security posture monitoring across AWS, Azure, and GCP.

Official
Advanced