What problem does it solve? AI agents frequently hallucinate gcloud command syntax, flags, and arguments, and can accidentally execute destructive operations or flood the context window with unbounded command output. This Skill enforces mandatory syntax validation, safety guardrails, and output reduction for every gcloud CLI interaction. ## Core Features & Use Cases - Mandatory Syntax Validation: Requires running gcloud help <leaf_command> before proposing or executing any command, with a strict 4-step plan template including dry-run verification. - Safety Guardrails: Maintains a denylist of prohibited operations (deletes, IAM changes, billing, KMS, org-level changes) that require explicit human authorization before execution. - Data Reduction & Scoping: Enforces --limit, --filter, and --format flags on all list commands, plus explicit --project and location flags to prevent interactive prompts and wrong-project execution. - Use Case: When asked to list running Compute Engine instances, the agent first validates syntax via gcloud help compute instances list, then runs a filtered, project-scoped command like gcloud compute instances list --filter="status:RUNNING" --project=my-project --format=json instead of an unconstrained list. ## Quick Start Ask the agent to list all running Compute Engine instances in your GCP project and it will validate the command syntax, apply filters, and propose a safe scoped command.
