GCP Infrastructure Audit & Optimization
Audit GCP projects for security, cost & performance—then generate optimization code
What You Can Do
You provide your GCP project configuration, and this skill systematically identifies security misconfigurations, unused resources, performance bottlenecks, and compliance gaps. It then generates a prioritized action plan with runnable Terraform or gcloud CLI code to fix each issue, saving you weeks of manual analysis and remediation work.
Features
Scans IAM policies, firewall rules, encryption, and access controls; flags OWASP and CIS compliance violations
Identifies unused compute instances, over-provisioned resources, and suboptimal pricing models; quantifies monthly savings potential
Analyzes CPU, memory, disk I/O, and network latency across Compute Engine, Cloud SQL, and Cloud Storage
Ranks findings by risk severity and implementation effort; suggests quick wins vs. strategic improvements
Produces ready-to-run Terraform modules and gcloud commands for each fix
Audits entire GCP organization, Folders, or specific projects in a single run
Tests against CIS GCP Foundations Benchmark and NIST controls
Quantifies risk scores, estimated cost savings, and performance gains
Example Output
Security Finding:
- ❌ CRITICAL: Default VPC with unrestricted SSH access
Location: us-central1 firewall rule 'default-allow-ssh'
Risk: Exposure to brute-force attacks
Fix (Terraform):
resource "google_compute_firewall" "restrict_ssh" {
name = "restrict-ssh"
network = "default"
allow { protocol = "tcp"; ports = ["22"] }
source_ranges = ["203.0.113.0/24"] # Your office IP
}
Cost Finding:
- 💰 HIGH: 4 Compute Engine instances (us-central1-a) using e2-standard-4, but metrics show <10% avg CPU
Current cost: $600/month
Recommendation: Downsize to e2-standard-2
Monthly savings: $300 (50% reduction)
Implementation: gcloud compute instances stop [INSTANCE] && gcloud compute instances change-machine-type [INSTANCE] --machine-type=e2-standard-2
Performance Finding:
- ⚡ MEDIUM: Cloud SQL (mysql-prod) connection pool exhaustion every morning 9-11 AM
Current: max_connections=100, avg concurrent=95
Recommendation: Increase to 150; add connection pooling (Cloud SQL Proxy)
Expected impact: Eliminate 95th percentile query latency spikes (+500ms)
What's Included
- SKILL.md: Complete audit workflows, decision trees, and remediation templates
- GCP scanning module: Automated project inventory collection via gcloud CLI or Terraform state
- Security assessment checklist: CIS GCP Foundations Benchmark verification
- Cost analysis formulas: Monthly spend projections and rightsizing logic
- Remediation code templates: Terraform modules and gcloud scripts for common fixes
- Report generator: Markdown/HTML audit report with findings, priorities, and ROI estimates
- Interactive remediation prompt: Step-by-step guidance to implement specific fixes
Who It's For
- Cloud architects and infrastructure engineers — plan and execute GCP platform optimization
- DevOps/SRE teams — reduce operational overhead and cost drift across production environments
- Security and compliance officers — validate architecture against industry frameworks (CIS, NIST, SOC 2)
- FinOps/cost optimization specialists — identify and quantify savings opportunities for budget forecasting
- Startup CTOs — audit inherited or legacy GCP setups to find quick wins before scaling
Best For
- Security posture assessments and compliance audits (CIS, NIST, FedRAMP, PCI-DSS readiness)
- Post-acquisition or platform consolidation audits (multi-project organizations)
- FinOps initiatives — quantifying and implementing cost reduction targets
- Performance baselines and capacity planning — forecasting growth and resource needs
- Incident prevention — proactive detection of misconfigurations that could cause outages
You might also like
You can design culturally appropriate survey instruments tailored to international development contexts, analyze mixed-methods data by integrating quantitative findings with qualitative insights, and implement robust data quality management systems for your field operations. Claude helps you create survey templates with adaptive logic, develop validation protocols, and produce data quality reports that highlight issues before analysis begins.
by skillslib
Prepare comprehensive expert witness reports and testimony that meet Daubert standards for admissibility and withstand cross-examination scrutiny. You'll get structured case analyses integrating psychological assessments, relevant case law citations, and anticipated counterarguments. The skill helps you document your forensic opinions with the legal rigor required in criminal, civil, and family law proceedings.
by skillslib
You can systematically evaluate architectural options by building decision matrices, identifying trade-offs, and documenting design rationale. This skill generates comparison frameworks, risk assessments, and architecture decision records (ADRs) that help you choose between competing approaches based on concrete criteria like performance, scalability, cost, and team capabilities.
by skillslib
You provide a single core insight or perspective, and this skill transforms it into a complete, coordinated thought leadership content suite across every major channel. It generates optimized articles, social threads, email sequences, presentation outlines, and more—all reinforcing the same core message while adapting to each platform's unique audience and format. Every piece maintains strategic consistency while maximizing reach and engagement.
by skillslib
Analyze commercial insurance applications by extracting risk factors, evaluating loss history and industry exposure, and generating structured underwriting recommendations with standardized documentation. You'll reduce review time per application, ensure consistent decision criteria across your team, and maintain compliant audit trails for every underwriting action.
by skillslib
You can convert raw discovery call notes into polished, multi-section sales proposals that include executive summaries tailored to buyer personas, needs analysis mapped to your solution architecture, tiered pricing options with competitive positioning, ROI projections with financial justification, and realistic implementation timelines. The skill preserves personalization and strategic positioning while automating structural components, letting you respond to RFPs and time-sensitive opportunities without sacrificing quality or consistency.
by skillslib
This skill analyzes property damage claims to identify viable subrogation opportunities against third-party defendants. It quantifies recovery potential using liability assessment, damages analysis, and comparable settlement benchmarks—then develops negotiation-backed strategies to maximize your recovery. The skill guides you through intake, documentation, negotiation, and settlement workflows to transform claims into recoveries.
by skillslib
Turn project descriptions, timelines, and structured data into professional draw.io diagrams instantly. You can generate flowcharts, org charts, Gantt charts, swimlane diagrams, and process flows by describing what you need. Claude creates draw.io XML that you can open directly in the editor or modify further.
by skillslib