Skills gcloud
📦

gcloud

Content revision r1 High Risk ⚙️ External commands

Manage Google Cloud from the CLI

Google Cloud operations often require precise CLI commands across many services. This skill gives Claude, Codex, and Claude Code a focused gcloud command guide.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "gcloud" from https://skillstore.io/skills/dicklesworthstone-gcloud.md and its manifest at https://skillstore.io/api/skills/dicklesworthstone-gcloud/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/dicklesworthstone-gcloud.md Signed manifest GET /api/skills/dicklesworthstone-gcloud/manifest Signed lockfile GET /api/skills/dicklesworthstone-gcloud/lockfile

Test it

Using "gcloud". I need to deploy a Cloud Run service from a container image.

Expected outcome:

The assistant would confirm project, region, image name, and access mode, then present a reviewed deployment sequence with validation steps.

Using "gcloud". I want to inspect recent failures in a Google Cloud service.

Expected outcome:

The assistant would identify the target service, suggest log filters, limit output volume, and explain what each result field means.

Using "gcloud". I need to remove an old VM safely.

Expected outcome:

The assistant would ask for the instance, zone, backups, and approval, then separate verification from the destructive removal step.

Security Audit

High Risk
v8 • 7/5/2026 Open versioned report

The Ruby backtick findings are false positives caused by Markdown formatting and fenced command examples. The substantive risks are high-impact Google Cloud operations: service account key files, privileged IAM changes, secret handling, public service exposure, and destructive commands.

1
Files scanned
428
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (6)

High
SKILL.md:24
Credential JSON file
gcloud auth activate-service-account --key-file=key.json
The example authenticates with --key-file=key.json, which encourages use of a long-lived service account key file. Such files are sensitive credentials and can compromise the project if leaked.
High
SKILL.md:326
Credential JSON file
gcloud iam service-accounts keys create key.json \
The example creates key.json for a service account, producing a long-lived credential file. Service account keys are high-value secrets and require strict controls.
High
SKILL.md:88-90SKILL.md:148-150SKILL.md:412-414
Destructive Cloud Operations Without Guardrails
The guide includes VM deletion, function deletion, and quiet-mode deletion examples. If executed without confirmation, these commands can remove live Google Cloud resources.
The cited lines directly show delete commands and a --quiet delete example. These are legitimate admin commands, but they are destructive when run against real resources.
High
SKILL.md:330-334
Privileged IAM Role Assignment Example
The guide shows adding roles/storage.admin to a service account. Broad IAM grants can enable data access, resource changes, and privilege expansion if used without review.
The cited command grants a predefined admin role to a service account. The risk is clear from the role name and IAM binding context.
Medium
SKILL.md:296-303SKILL.md:306-308
Secret Values Created and Accessed Through Shell Commands
The guide demonstrates creating secret versions from shell input and accessing the latest secret value. This can expose secrets in terminal output, logs, or shell history if real values are used.
The cited Secret Manager examples handle secret material directly. The values are placeholders, so the risk depends on whether users substitute real secrets.
Medium
SKILL.md:105-110
Public Cloud Run Exposure Example
The Cloud Run deployment example includes --allow-unauthenticated. This can publish a service to unauthenticated internet users if copied into a real deployment.
The cited deployment block explicitly includes --allow-unauthenticated. Public access can be valid, but it should require deliberate review.

Risk Factors

⚙️ External commands (138)
SKILL.md:8 SKILL.md:13-15 SKILL.md:15-18 SKILL.md:18-20 SKILL.md:20-23 SKILL.md:23-25 SKILL.md:25-28 SKILL.md:28-30 SKILL.md:30-35 SKILL.md:35-37 SKILL.md:37-40 SKILL.md:40-42 SKILL.md:42-45 SKILL.md:45-47 SKILL.md:47-50 SKILL.md:50-53 SKILL.md:53-56 SKILL.md:56-59 SKILL.md:59-64 SKILL.md:64-66 SKILL.md:66-69 SKILL.md:69-75 SKILL.md:75-78 SKILL.md:78-80 SKILL.md:80-83 SKILL.md:83-86 SKILL.md:86-89 SKILL.md:89-91 SKILL.md:91-96 SKILL.md:96-98 SKILL.md:98-101 SKILL.md:101-103 SKILL.md:103-106 SKILL.md:106-111 SKILL.md:111-114 SKILL.md:114-116 SKILL.md:116-119 SKILL.md:119-123 SKILL.md:123-128 SKILL.md:128-130 SKILL.md:130-133 SKILL.md:133-141 SKILL.md:141-144 SKILL.md:144-146 SKILL.md:146-149 SKILL.md:149-151 SKILL.md:151-156 SKILL.md:156-158 SKILL.md:158-161 SKILL.md:161-164 SKILL.md:164-167 SKILL.md:167-171 SKILL.md:171-174 SKILL.md:174-179 SKILL.md:179-184 SKILL.md:184-186 SKILL.md:186-189 SKILL.md:189-191 SKILL.md:191-194 SKILL.md:194-196 SKILL.md:196-199 SKILL.md:199-208 SKILL.md:208-211 SKILL.md:211-213 SKILL.md:213-218 SKILL.md:218-220 SKILL.md:220-223 SKILL.md:223-228 SKILL.md:228-231 SKILL.md:231-233 SKILL.md:233-236 SKILL.md:236-238 SKILL.md:238-243 SKILL.md:243-245 SKILL.md:245-248 SKILL.md:248-250 SKILL.md:250-253 SKILL.md:253-255 SKILL.md:255-258 SKILL.md:258-260 SKILL.md:260-265 SKILL.md:265-267 SKILL.md:267-270 SKILL.md:270-272 SKILL.md:272-275 SKILL.md:275-277 SKILL.md:277-280 SKILL.md:280-282 SKILL.md:282-285 SKILL.md:285-287 SKILL.md:287-292 SKILL.md:292-294 SKILL.md:294-297 SKILL.md:297-299 SKILL.md:299-302 SKILL.md:302-304 SKILL.md:304-307 SKILL.md:307-309 SKILL.md:309-314 SKILL.md:314-316 SKILL.md:316-319 SKILL.md:319-322 SKILL.md:322-325 SKILL.md:325-328 SKILL.md:328-331 SKILL.md:331-335 SKILL.md:335-340 SKILL.md:340-342 SKILL.md:342-345 SKILL.md:345-347 SKILL.md:347-350 SKILL.md:350-352 SKILL.md:352-357 SKILL.md:357-359 SKILL.md:359-362 SKILL.md:362-364 SKILL.md:364-369 SKILL.md:369-371 SKILL.md:371-374 SKILL.md:374-376 SKILL.md:376-381 SKILL.md:381-383 SKILL.md:383-386 SKILL.md:386-388 SKILL.md:388-391 SKILL.md:391-393 SKILL.md:393-398 SKILL.md:398-400 SKILL.md:400-403 SKILL.md:403-405 SKILL.md:405-408 SKILL.md:408-410 SKILL.md:410-413 SKILL.md:413-415 SKILL.md:415-420 SKILL.md:420-422 SKILL.md:422-425 SKILL.md:425-427
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/dicklesworthstone-gcloud/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/dicklesworthstone-gcloud/security.svg)](https://skillstore.io/skills/dicklesworthstone-gcloud?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/dicklesworthstone-gcloud?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dicklesworthstone-gcloud/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/dicklesworthstone-gcloud.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

Dicklesworthstone. (2026). gcloud security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dicklesworthstone-gcloud/audits/8

BibTeX citation

@techreport{dicklesworthstone-dicklesworthstone-gcloud-2026, author = {Dicklesworthstone}, title = {gcloud security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/dicklesworthstone-gcloud/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "gcloud security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "Dicklesworthstone" date-released: "2026-07-05" url: "https://skillstore.io/skills/dicklesworthstone-gcloud/audits/8" identifiers: - type: other value: "skillstore:dicklesworthstone-gcloud:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
72
Community
83
Spec Compliance

What You Can Build

Operate GCP projects

List resources, inspect configuration, read logs, and manage common Google Cloud services from the terminal.

Deploy application services

Prepare Cloud Run, Cloud Functions, App Engine, and container deployment commands for application teams.

Manage data workflows

Use Cloud Storage, BigQuery, Pub/Sub, and Cloud SQL command examples for data platform tasks.

Try These Prompts

Check My GCP Context 
Help me check my active Google Cloud account, current project, and default region before I run any changes.
List Service Resources 
Show the safest gcloud commands to list my Compute Engine instances, Cloud Run services, and recent logs in a specific project.
Prepare a Deployment 
Draft a reviewed Cloud Run deployment workflow for my service, including questions about region, image, authentication, and public access.
Plan a Controlled Change 
Help me plan a GKE resize or IAM policy change with verification steps, approval checkpoints, and rollback considerations before commands run.

Best Practices

  • Confirm the active account, project, region, and zone before running any command that changes resources.
  • Review destructive, public access, secret, and IAM commands manually before execution.
  • Prefer least privilege roles and short-lived credentials instead of long-lived service account keys.

Avoid

  • Do not run delete, IAM, or public deployment commands from an unreviewed generated response.
  • Do not store service account key files in a workspace, repository, or shared folder.
  • Do not paste real secrets into shell history or expose secret values in logs.

Frequently Asked Questions

What does this skill help with?
It helps an AI assistant prepare Google Cloud CLI commands for common GCP administration and deployment tasks.
Does it install gcloud or authenticate for me?
No. You must install the required CLI tools and authenticate with an account that has suitable permissions.
Can it change live cloud resources?
The examples include commands that can create, update, expose, or delete resources if a user runs them.
Is it safe for production environments?
Use it with manual review, approvals, backups, and environment-specific controls before running production commands.
Does it cover BigQuery and Cloud Storage?
Yes. It includes examples for listing datasets, running queries, loading data, buckets, object copies, and sync operations.
How should I handle credentials with this skill?
Avoid long-lived key files when possible, protect any credential files, and prefer approved identity flows for your organization.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/Dicklesworthstone/agent_flywheel_clawdbot_skills_and_integrations/tree/main/skills/gcloud

Ref

c579efd02184f1128d6741d16e6c8d951d7d4208

Maintenance freshness

7/21/2026

Usage

4 downloads · 332 views

File structure

📄 SKILL.md