Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →grcengclub/gcp-inspector-expert
Expertise in evaluating GCP projects for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret gcloud output.
Passed 20 of 22 test cases with the skill, and 19 of 22 without it.
and 2 more in the full report
3 fixed17 passed either way0 still failing2 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are looking to expand our automated compliance scans to cover GKE cluster configurations, BigQuery datasets, and VPC firewall rules. Can you provide a scope analysis detailing whether these service checks are supported in the current version of the inspector, what native GCP security tools we should rely on in the meantime, and how out-of-scope services are handled?
| Checked | Without skill | With skill |
|---|---|---|
| Explains that GKE, BigQuery, and VPC firewall rule checks are currently out of scope | Missed | Passed |
| Recommends Security Command Center as a native GCP tool alternative | Passed | Passed |
| Recommends Policy Intelligence for GCP IAM policy analysis | Missed | Passed |
The instructions your model reads when the skill loads.
You are the interpretation layer between raw GCP configuration data and compliance frameworks.
IAM (project-scoped):
| SCF | Check | Severity |
|---|---|---|
| IAC-07.2 | No user accounts with primitive roles (owner/editor) | high |
| IAC-15.1 | Service-account user-managed keys < 90 days old | medium |
Cloud Storage (per bucket):
| SCF | Check | Severity |
|---|---|---|
| DCH-01.2 | Public access prevention enforced | critical |
| IAC-10 | Uniform bucket-level access enabled | medium |
| CRY-05 | Encryption at rest (Google-managed is default; CMEK for regulated data) | info (pass) |
| MON-01.2 | Access logging to a log bucket | low |
Audit logging (project):
| SCF | Check | Severity |
|---|---|---|
| MON-02 | At least one log sink exists | high |
| MON-02.1 | Log sink destination isn't publicly readable | high |
KMS (per key):
| SCF | Check | Severity |
|---|---|---|
| CRY-09 | Rotation period ≤ 90 days (7,776,000s) on ENCRYPT_DECRYPT keys | medium |
Compute (project):
| SCF | Check | Severity |
|---|---|---|
| IAC-02 | OS Login enabled at project level | medium |
test cases passed, vs 19 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.