GCP Infrastructure Audit & Optimization
Audit GCP projects for security, cost & performance—then generate optimization code
What You Can Do
You provide your GCP project configuration, and this skill systematically identifies security misconfigurations, unused resources, performance bottlenecks, and compliance gaps. It then generates a prioritized action plan with runnable Terraform or gcloud CLI code to fix each issue, saving you weeks of manual analysis and remediation work.
Features
Scans IAM policies, firewall rules, encryption, and access controls; flags OWASP and CIS compliance violations
Identifies unused compute instances, over-provisioned resources, and suboptimal pricing models; quantifies monthly savings potential
Analyzes CPU, memory, disk I/O, and network latency across Compute Engine, Cloud SQL, and Cloud Storage
Ranks findings by risk severity and implementation effort; suggests quick wins vs. strategic improvements
Produces ready-to-run Terraform modules and gcloud commands for each fix
Audits entire GCP organization, Folders, or specific projects in a single run
Tests against CIS GCP Foundations Benchmark and NIST controls
Quantifies risk scores, estimated cost savings, and performance gains
Example Output
Security Finding:
- ❌ CRITICAL: Default VPC with unrestricted SSH access
Location: us-central1 firewall rule 'default-allow-ssh'
Risk: Exposure to brute-force attacks
Fix (Terraform):
resource "google_compute_firewall" "restrict_ssh" {
name = "restrict-ssh"
network = "default"
allow { protocol = "tcp"; ports = ["22"] }
source_ranges = ["203.0.113.0/24"] # Your office IP
}
Cost Finding:
- 💰 HIGH: 4 Compute Engine instances (us-central1-a) using e2-standard-4, but metrics show <10% avg CPU
Current cost: $600/month
Recommendation: Downsize to e2-standard-2
Monthly savings: $300 (50% reduction)
Implementation: gcloud compute instances stop [INSTANCE] && gcloud compute instances change-machine-type [INSTANCE] --machine-type=e2-standard-2
Performance Finding:
- ⚡ MEDIUM: Cloud SQL (mysql-prod) connection pool exhaustion every morning 9-11 AM
Current: max_connections=100, avg concurrent=95
Recommendation: Increase to 150; add connection pooling (Cloud SQL Proxy)
Expected impact: Eliminate 95th percentile query latency spikes (+500ms)
What's Included
- SKILL.md: Complete audit workflows, decision trees, and remediation templates
- GCP scanning module: Automated project inventory collection via gcloud CLI or Terraform state
- Security assessment checklist: CIS GCP Foundations Benchmark verification
- Cost analysis formulas: Monthly spend projections and rightsizing logic
- Remediation code templates: Terraform modules and gcloud scripts for common fixes
- Report generator: Markdown/HTML audit report with findings, priorities, and ROI estimates
- Interactive remediation prompt: Step-by-step guidance to implement specific fixes
Who It's For
- Cloud architects and infrastructure engineers — plan and execute GCP platform optimization
- DevOps/SRE teams — reduce operational overhead and cost drift across production environments
- Security and compliance officers — validate architecture against industry frameworks (CIS, NIST, SOC 2)
- FinOps/cost optimization specialists — identify and quantify savings opportunities for budget forecasting
- Startup CTOs — audit inherited or legacy GCP setups to find quick wins before scaling
Best For
- Security posture assessments and compliance audits (CIS, NIST, FedRAMP, PCI-DSS readiness)
- Post-acquisition or platform consolidation audits (multi-project organizations)
- FinOps initiatives — quantifying and implementing cost reduction targets
- Performance baselines and capacity planning — forecasting growth and resource needs
- Incident prevention — proactive detection of misconfigurations that could cause outages
You might also like
You can evaluate unfamiliar locations objectively against your specific production needs—whether that's crane access, parking capacity, noise restrictions, or permit requirements. The skill generates comprehensive scout reports that compare multiple sites using weighted evaluation matrices, flag deal-breakers early, and document infrastructure limitations so your production team makes informed decisions before committing resources to visits.
by skillslib
You'll design robust SCADA system architectures, configure industrial protocols (Modbus, Profibus, OPC-UA, DNP3), and diagnose connectivity and performance issues across distributed control networks. Get step-by-step configuration guidance, integration workflows, and troubleshooting decision trees tailored to your specific hardware and protocol stack.
by skillslib
You can establish systematic color grading workflows that accelerate project delivery, ensure visual consistency across episodes and projects, and maintain broadcast-quality standards. Claude generates reusable templates, quality control checklists, and grading decision frameworks tailored to your project's color science and deliverable requirements.
by skillslib
Use Claude to automate your entire collection workflow, from first touch to recovery, with legally sound escalation protocols. You'll recover more money in less time, reduce bad debt write-offs by 25-40%, and build defensible collection records that withstand legal scrutiny. Claude handles customized demand letters, compliance validation, debtor profiling, and escalation strategies tailored to account age, debtor behavior, and jurisdiction.
by skillslib
You can conduct comprehensive active transportation network audits that identify missing links, connectivity gaps, and underserved communities. Claude helps you prioritize infrastructure investments against limited budgets using equity screening, mode-share modeling, and cost-benefit analysis—producing client-ready documentation and stakeholder presentations that justify infrastructure decisions with quantitative evidence rather than assumptions.
by skillslib
Turn project descriptions, timelines, and structured data into professional draw.io diagrams instantly. You can generate flowcharts, org charts, Gantt charts, swimlane diagrams, and process flows by describing what you need. Claude creates draw.io XML that you can open directly in the editor or modify further.
by skillslib
Generate customized legal documents and client communications automatically from your MyCase case data. This skill extracts case details, client information, and matter status to populate document templates, send email updates, and create batch processing workflows. Reduce manual data entry and standardize your document generation process while maintaining client communication consistency.
by skillslib
This skill helps you troubleshoot Wwise integration issues, diagnose audio performance bottlenecks, and generate comprehensive documentation for interactive audio specifications. You'll get step-by-step fixes for common implementation problems, performance optimization strategies, and best practices for audio systems across different game engines and platforms.
by skillslib