Can I use this for Terraform projects?

Absolutely. The skill is designed to recognize and assist with .tf file patterns, particularly for google_project_iam, google_secret, and google_compute_network resources.

Does this skill follow GCP security best practices?

Yes, the skill strictly enforces the principle of least privilege, avoids basic IAM roles like 'owner' or 'editor', and promotes deny-by-default firewall configurations.

Does it support private networking for serverless apps?

Yes, it includes specialized instructions for creating VPC Access Connectors to safely link serverless services to private VPC resources.

How does it handle secrets in Cloud Run?

It provides patterns for both mounting secrets as files (the more secure method) and as environment variables, while ensuring version pinning rather than using the 'latest' tag.

GCP Infrastructure & Security

Name: GCP Infrastructure & Security
Author: Agentient

byAgentient

0•

Cloud Infrastructure

Configures secure GCP IAM, Secret Manager, and VPC networking using industry-standard security best practices.

This skill empowers Claude to architect and implement core Google Cloud Platform services with a rigorous focus on the principle of least privilege. It streamlines the creation of service accounts, manages sensitive credentials via Secret Manager, and establishes robust VPC networking with deny-by-default firewall rules. By proactively identifying security anti-patterns like basic IAM roles or overly permissive network access, it ensures that your GCP environments are production-ready, isolated, and compliant with modern infrastructure standards.

Key Features

01VPC Access Connector provisioning for serverless-to-private resource links

02Secure Secret Manager orchestration and Cloud Run integration

03Automated IAM service account creation with minimal permission binding

04Strict deny-by-default firewall rule implementation and bastion setup

05Custom VPC networking and subnet architecture configuration

060 GitHub stars

Use Cases

01Designing isolated network environments with custom subnets and granular firewall rules

02Provisioning least-privilege access for microservices running on Cloud Run or GKE

03Securing sensitive application credentials and API keys using Secret Manager

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add agentient/vibekit gcp-services

For use in Claude.ai and ChatGPT

Download Skill