Skip to content
Get packs

Compliance Environment Assessor

Assess Google Cloud folders and projects for compliance readiness and recommend an Assured Workloads framework

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
5 files

What it does

When installed, the agent can inspect an existing Google Cloud folder or project, list its resources and effective Organization Policies, and check them against sovereign data and compliance frameworks such as EU Data Boundary, FedRAMP, DoD IL4/IL5, ITAR and CJIS. It is designed to be read-only: it reports pre-flight readiness notes and suggests which Assured Workloads framework fits, but it is not supposed to change any cloud settings. It relies on two bundled Python scripts to do the rule checks rather than guessing.

Great for

  • Cloud or compliance engineers preparing an existing Google Cloud environment for a regulated workload
  • Teams deciding which Assured Workloads framework (for example EU or US data boundary) fits a folder
  • People who want a read-only first look at compliance gaps before any deployment

Skip it if

  • Making live policy changes or deploying frameworks, which the skill explicitly prohibits (the agent is told never to run mutating commands) and which need separate tooling and review
  • Producing a formal audit report or remediation scripts; the skill excludes both, so auditors should not treat its output as a certified assessment
  • Environments where you cannot share resource metadata with an AI agent, since it reads resource telemetry and Org Policy data through gcloud

Try asking

  • “Assess my environment for compliance for folders/123”
  • “Which Assured Workloads framework should I use for an EU sovereignty requirement?”
  • “Check if my project projects/xyz is ready for a FedRAMP High workload”
  • “Discover compliance gaps in my folder before deployment”
Step-by-step guide: how to use Compliance Environment AssessorInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 5 original files, the Apache-2.0 licence and an attribution note.

    assuredworkloads-environment-assessor.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip assuredworkloads-environment-assessor.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip assuredworkloads-environment-assessor.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Review the commands the agent proposes before running them and confirm they are read-only (describe, list, search) as the skill intends.
  • Export frameworks.json once and reuse it, since the skill caches built-in frameworks per session.
  • Treat results as pre-flight readiness indicators and confirm final compliance status with Google Cloud documentation or your compliance team.

What's inside

  • references/attribution.md
  • references/gcloud-commands.md
  • scripts/evaluate_control_rules.py
  • scripts/validate_workload_payload.py
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.