gcp-project-auditor

What problem does it solve?

Manually auditing GCP projects for security vulnerabilities, compliance breaches, and adherence to best practices is a complex, error-prone, and time-consuming process. This skill automates the entire audit workflow, ensuring your GCP environment is secure and compliant.

Core Features & Use Cases

• Comprehensive Resource Scan: Automatically inventories all GCP resources within a specified project.
• IAM Policy Analysis: Scans and analyzes all IAM policies to identify excessive permissions and potential security risks, especially in production environments.
• Critical Security Checks: Detects common critical issues like public access to data, public IPs on databases/compute, and overly permissive firewall rules.
• Detailed Reporting: Generates a structured Markdown report with an executive summary, findings categorized by severity, and actionable recommendations.
• Use Case: A security engineer needs to verify that a new production GCP project adheres to L'Oréal's strict security policies. They use this skill to audit the project, which then identifies an overly permissive firewall rule and a service account with excessive roles, providing immediate, actionable remediation steps.

Quick Start

Audit the GCP project 'oa-data-btdpprd-pd' for security and compliance issues.