claude

cloud-security-gcp

Defensive Google Cloud security: IAM and Workload Identity, Organization Policies, VPC Service Controls, and CIS GCP benchmark audits.

4 on GitHubby Diego Bodartv1.0.0MITupdated 1 month ago
/

Plugin cloud-security-gcp from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (1)

  • gcp-iam-patterns

    GCP IAM reference: the permission model, role types, deny policies, least-privilege service accounts, Workload Identity Federation for CI, custom roles, domain-restricted sharing, and GKE Workload Identity. Use when writing or reviewing GCP IAM bindings.

Slash commands (1)

  • /cloud-security-gcp:gcp-sec-audit

    Run a structured security audit of a GCP project or organization (live gcloud access, Terraform, or config export) covering IAM, Organization Policies, networking, storage, and logging, with findings by severity.

Subagents (2)

  • gcp-org-policy-auditor

    Use this agent when auditing GCP governance: Organization Policy constraints (boolean, list, custom CEL), CIS GCP Foundations controls, Security Command Center findings, and resource hierarchy design. It produces a constraint and benchmark gap report with recommended org policies.

  • gcp-security-architect

    Use this agent when designing or reviewing GCP security architecture: IAM bindings and conditions, service account keys versus Workload Identity Federation, resource hierarchy, VPC firewall rules and VPC Service Controls, GCS access, Cloud KMS, and Cloud Audit Logs. It produces an assessment with pr

View source on GitHub

More from HermeticOrmus/LibreSecOps-Claude-Code

All 33 plugins →

Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.

2 skills · 2 commands · 2 agents

4

Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.

2 skills · 2 commands · 2 agents

4

Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.

2 skills · 2 commands · 2 agents

4

Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.

2 skills · 2 commands · 2 agents

4

Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.

2 skills · 2 commands · 2 agents

4

Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.

2 skills · 2 commands · 2 agents

4

Similar plugins

data-agent-kit

claudecodex

This plugin provides a specialized suite of skills for data engineers and database practitioners working on Google Cloud. It acts as an expert assistant, allowing you to use natural language prompts in your preferred coding agent to architect complex data pipelines, transform data with dbt, write Spark and BigQuery SQL notebooks, and orchestrate end-to-end workflows across GCP's data ecosystem.

37 skills

anthropics/claude-plugins-official 47,076

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

200 skills

mukul975/Anthropic-Cybersecurity-Skills 36,021

32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security, incident-response, red-team, threat-detection. v2.8.1 audits senior-fullstack / senior-frontend / senior-backend against karpathy-coder + Matt Pocock — each ships a 7-question forcing-question library, 4 customization profiles (JSON), deterministic decision engine, composition map into POWERFUL specialists, plus cs-fullstack-engineer / cs-frontend-engineer / cs-backend-engineer orchestrator agents (context: fork) + /cs-fullstack-review, /cs-frontend-review, /cs-backend-review, /cs-engineer-grill slash commands.

35 skills · hooks

alirezarezvani/claude-skills 29,725

DevOps, cloud, and deployment specialists - Kubernetes, Terraform, AWS, Azure, GCP, and SRE

VoltAgent/awesome-claude-code-subagents 26,513

data-agent-kit

claudecodex

This plugin provides a specialized suite of skills for data engineers and database practitioners working on Google Cloud. It acts as an expert assistant, allowing you to use natural language prompts in your preferred coding agent to architect complex data pipelines, transform data with dbt, write Spark and BigQuery SQL notebooks, and orchestrate end-to-end workflows across GCP's data ecosystem.

37 skills

google/skills 24,091

prowler

claude

Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.

1 skill · 1 MCP server

prowler-cloud/prowler 15,234

Maintain cloud-security-gcp?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins33 plugins