gcp-security-scanner
GCP security configuration scanning and hardening using Security Command Center, Forseti, and ScoutSuite
npx skills add a5c-ai/babysitter --skill gcp-security-scanner --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# GCP Security Scanner Skill ## Purpose Automated Google Cloud Platform security configuration scanning and hardening to identify misconfigurations, compliance violations, and security risks across GCP projects and organizations. ## Capabilities ### Security Command Center Integration - Leverage GCP Security Command Center findings - Review vulnerability and threat findings - Check Security Health Analytics results - Monitor Event Threat Detection alerts - Track Container Threat Detection findings - Generate compliance reports ### IAM Security Analysis - Analyze IAM policies for over-permissive access - Check service account key usage and rotation - Identify excessive permissions - Review organization policy constraints - Detect cross-project access - Audit IAM recommender suggestions ### VPC Firewall Analysis - Review firewall rules for overly permissive access - Check for open management ports - Validate VPC Service Controls - Review Shared VPC configurations - Check Private Google Access settings - Analyze VPC flow logs configuration ### Cloud Storage Security - Identify publicly accessible buckets - Check bucket IAM policies - Validate uniform bucket-level access - Review bucke
- Purpose
- Capabilities
- Security Command Center Integration
- IAM Security Analysis
- VPC Firewall Analysis
- Cloud Storage Security
- Cloud KMS Configuration
- Audit Logging Verification
- Organization Policy Assessment
- GCP Services Covered
- Integrations
- Target Processes
- Input Schema
- Output Schema
What does the gcp-security-scanner skill do?
GCP security configuration scanning and hardening using Security Command Center, Forseti, and ScoutSuite
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill gcp-security-scanner --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.