Assesses the security posture of Google Cloud Storage (GCS) buckets and projects. Grounds every finding in gathered telemetry, evaluates buckets against Google security best practices (public access, IAM over-granting, CMEK, VPC Service Controls, audit logging), and correlates signals to flag toxic combinations of individually low-risk settings, with actionable remediation.
Install
npx skills add GoogleCloudPlatform/data-agent-kit-plugin --skill gcs-security-assessmentnpx skills add GoogleCloudPlatform/data-agent-kit-plugin --skill gcs-security-assessment -a claude-code -gnpx skills add GoogleCloudPlatform/data-agent-kit-plugin --skill gcs-security-assessment -a codex -ggemini skills install https://github.com/GoogleCloudPlatform/data-agent-kit-plugin.git --path skills/gcs-security-assessmentgh skill install GoogleCloudPlatform/data-agent-kit-plugin gcs-security-assessmentgit clone --depth 1 https://github.com/GoogleCloudPlatform/data-agent-kit-plugin /tmp/GoogleCloudPlatform__data-agent-kit-plugin
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/GoogleCloudPlatform__data-agent-kit-plugin/skills/gcs-security-assessment ~/.claude/skills/gcs-security-assessment # Claude Code
cp -R /tmp/GoogleCloudPlatform__data-agent-kit-plugin/skills/gcs-security-assessment ~/.agents/skills/gcs-security-assessment # Codex, Cursor, Gemini CLI, Copilot, OpenCode