iam-recommendations-fetcher

Fetch IAM recommendations and insights from Google Cloud for target scopes.

Updated Jul 4, 2026
One-click install
npx skills add https://github.com/ssmleo/govfolio --skill iam-recommendations-fetcher-ssmleo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: iam-recommendations-fetcher
Source: https://github.com/ssmleo/govfolio/tree/main/.agents/skills/iam-recommendations-fetcher
Command: npx skills add https://github.com/ssmleo/govfolio --skill iam-recommendations-fetcher-ssmleo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill streamlines the process of fetching IAM recommendations and insights from Google Cloud, enabling quick access to security information for specified target scopes.

Core Features & Use Cases

  • Target Scope Validation: Validates input target scope (Organization, Folder, or Project).
  • Recommendation Retrieval: Fetches raw IAM recommendations and associated security insights.
  • Output Formatting: Delivers results in JSON or Markdown table format based on user preference.
  • Use Case: Before applying security recommendations, use this Skill to retrieve and analyze insights from a specific project or organization.

Quick Start

Use the iam-recommendations-fetcher skill to fetch IAM recommendations for the target scope 'projects/my-test-project'.

Frequently Asked Questions about iam-recommendations-fetcher

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fetch IAM recommendations and security insights from Google Cloud?

To fetch IAM recommendations and security insights from Google Cloud, specify a target scope like an organization, folder, or project. The tool validates the input and retrieves data using gcloud commands, MCP tools, or direct API calls, returning results in JSON or Markdown format.

Can I retrieve IAM recommendations for a specific Google Cloud project scope?

Yes, you can retrieve IAM recommendations for a specific Google Cloud project scope. The tool validates target scopes including organizations, folders, and projects before fetching the associated security insights and raw IAM recommendations.

Do I need special permissions to retrieve Google Cloud IAM recommendations?

Yes, you need existing access to Google Cloud resources and specific permissions to execute IAM Recommender commands. The tool relies on these credentials to retrieve recommendations and insights from your specified target scopes.

What is the best way to get Google Cloud IAM security insights in a readable format?

The best way to get Google Cloud IAM security insights in a readable format is to request the output as a Markdown table. The tool delivers formatted results containing raw IAM recommendations and associated security insights based on your preference.

Why does fetching IAM recommendations fail for my Google Cloud organization?

Fetching IAM recommendations fails when the target scope input is invalid or you lack permissions to execute IAM Recommender commands. The tool validates the organization, folder, or project scope and handles errors during data retrieval.

Does the IAM recommendations fetcher support direct API calls or only gcloud commands?

The IAM recommendations fetcher supports both direct API calls and gcloud commands, along with MCP tools. It utilizes these methods to retrieve raw IAM recommendations and associated security insights for your specified Google Cloud target scopes.