GCP Infrastructure Audit & Optimization
Audit GCP projects for security, cost & performance—then generate optimization code
What You Can Do
You provide your GCP project configuration, and this skill systematically identifies security misconfigurations, unused resources, performance bottlenecks, and compliance gaps. It then generates a prioritized action plan with runnable Terraform or gcloud CLI code to fix each issue, saving you weeks of manual analysis and remediation work.
Features
Scans IAM policies, firewall rules, encryption, and access controls; flags OWASP and CIS compliance violations
Identifies unused compute instances, over-provisioned resources, and suboptimal pricing models; quantifies monthly savings potential
Analyzes CPU, memory, disk I/O, and network latency across Compute Engine, Cloud SQL, and Cloud Storage
Ranks findings by risk severity and implementation effort; suggests quick wins vs. strategic improvements
Produces ready-to-run Terraform modules and gcloud commands for each fix
Audits entire GCP organization, Folders, or specific projects in a single run
Tests against CIS GCP Foundations Benchmark and NIST controls
Quantifies risk scores, estimated cost savings, and performance gains
Example Output
Security Finding:
- ❌ CRITICAL: Default VPC with unrestricted SSH access
Location: us-central1 firewall rule 'default-allow-ssh'
Risk: Exposure to brute-force attacks
Fix (Terraform):
resource "google_compute_firewall" "restrict_ssh" {
name = "restrict-ssh"
network = "default"
allow { protocol = "tcp"; ports = ["22"] }
source_ranges = ["203.0.113.0/24"] # Your office IP
}
Cost Finding:
- 💰 HIGH: 4 Compute Engine instances (us-central1-a) using e2-standard-4, but metrics show <10% avg CPU
Current cost: $600/month
Recommendation: Downsize to e2-standard-2
Monthly savings: $300 (50% reduction)
Implementation: gcloud compute instances stop [INSTANCE] && gcloud compute instances change-machine-type [INSTANCE] --machine-type=e2-standard-2
Performance Finding:
- ⚡ MEDIUM: Cloud SQL (mysql-prod) connection pool exhaustion every morning 9-11 AM
Current: max_connections=100, avg concurrent=95
Recommendation: Increase to 150; add connection pooling (Cloud SQL Proxy)
Expected impact: Eliminate 95th percentile query latency spikes (+500ms)
What's Included
- SKILL.md: Complete audit workflows, decision trees, and remediation templates
- GCP scanning module: Automated project inventory collection via gcloud CLI or Terraform state
- Security assessment checklist: CIS GCP Foundations Benchmark verification
- Cost analysis formulas: Monthly spend projections and rightsizing logic
- Remediation code templates: Terraform modules and gcloud scripts for common fixes
- Report generator: Markdown/HTML audit report with findings, priorities, and ROI estimates
- Interactive remediation prompt: Step-by-step guidance to implement specific fixes
Who It's For
- Cloud architects and infrastructure engineers — plan and execute GCP platform optimization
- DevOps/SRE teams — reduce operational overhead and cost drift across production environments
- Security and compliance officers — validate architecture against industry frameworks (CIS, NIST, SOC 2)
- FinOps/cost optimization specialists — identify and quantify savings opportunities for budget forecasting
- Startup CTOs — audit inherited or legacy GCP setups to find quick wins before scaling
Best For
- Security posture assessments and compliance audits (CIS, NIST, FedRAMP, PCI-DSS readiness)
- Post-acquisition or platform consolidation audits (multi-project organizations)
- FinOps initiatives — quantifying and implementing cost reduction targets
- Performance baselines and capacity planning — forecasting growth and resource needs
- Incident prevention — proactive detection of misconfigurations that could cause outages
You might also like
Turn project descriptions, timelines, and structured data into professional draw.io diagrams instantly. You can generate flowcharts, org charts, Gantt charts, swimlane diagrams, and process flows by describing what you need. Claude creates draw.io XML that you can open directly in the editor or modify further.
by skillslib
You can design culturally appropriate survey instruments tailored to international development contexts, analyze mixed-methods data by integrating quantitative findings with qualitative insights, and implement robust data quality management systems for your field operations. Claude helps you create survey templates with adaptive logic, develop validation protocols, and produce data quality reports that highlight issues before analysis begins.
by skillslib
You can evaluate whether products are viable remanufacturing candidates by conducting systematic disassembly analysis and identifying recovery opportunities. The skill helps you design efficient remanufacturing workflows, calculate ROI and environmental impact metrics (including embodied energy recovery of 85-90%), and create remanufacturability scorecards that guide design improvements and supply chain decisions.
by skillslib
You can diagnose warehouse bottlenecks using structured data analysis, then generate optimized layouts and flow improvements. The skill models space utilization, labor deployment, and throughput constraints to identify quick wins and long-term improvements, delivering quantified cost savings and performance gains for your specific facility.
by skillslib
You can systematically code qualitative data against your evaluation framework, surface patterns and themes across multiple responses, extract compelling impact stories with supporting evidence, and generate summary matrices that link narrative findings to your outcomes claims. This skill maintains analytical rigor while reducing the 40-60 hours typically spent manually reviewing transcripts and open-ended survey responses per evaluation cycle.
by skillslib
Get complete, ready-to-deploy lead magnets tailored to your ideal customer profile. Claude designs the concept, writes the persuasive copy, builds the email sequences, and creates deployment strategies that attract qualified prospects and build engaged lists fast. You'll capture 3-5x more subscribers with magnetic offers that actually resonate.
by skillslib
You can convert raw discovery call notes into polished, multi-section sales proposals that include executive summaries tailored to buyer personas, needs analysis mapped to your solution architecture, tiered pricing options with competitive positioning, ROI projections with financial justification, and realistic implementation timelines. The skill preserves personalization and strategic positioning while automating structural components, letting you respond to RFPs and time-sensitive opportunities without sacrificing quality or consistency.
by skillslib
This skill generates optimized facility layouts by analyzing material and personnel flow patterns, validating against operational constraints, and comparing multiple design options with quantified metrics. You provide your facility's dimensions, equipment locations, and operational requirements, and Claude produces detailed layouts with flow efficiency scores, space utilization analysis, and cost-benefit comparisons. Each layout option includes specific recommendations for improving throughput, reducing congestion points, and enhancing safety compliance.
by skillslib