Skip to content
Get packs

Security Command Center Finding Query

Lets an agent read-only query Google Cloud Security Command Center findings by scope, name, or class.

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
3 files

What it does

Once installed, the agent can look up security findings from Google Cloud's Security Command Center, such as toxic combinations, vulnerabilities, external exposures and threats, using read-only gcloud CLI commands. It asks for an organization, folder or project scope before running anything, and it halts and reports errors rather than trying to fix them. It is designed for triage, not for changing anything in the cloud.

Great for

  • Cloud security engineers triaging Security Command Center findings for an organization or project
  • Teams who need a quick read-only lookup of a specific finding by its full resource name
  • Analysts validating whether a finding belongs to a given class such as TOXIC_COMBINATION or THREAT

Skip it if

  • People who want the agent to draft or apply remediations, patches or configuration changes; the skill explicitly excludes this
  • Users without a Google Cloud account or gcloud access, since the skill only works against live Security Command Center data
  • Situations where the requester cannot supply a parent scope, because the skill is designed to halt rather than guess

Try asking

  • “List active VULNERABILITY findings for project my-project-id and summarise the top issues”
  • “Get the details of this finding name: organizations/123/sources/456/findings/789 for triage”
  • “Show me the toxic combination findings under folder 987 in the eu location”
Step-by-step guide: how to use Security Command Center Finding QueryInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the Apache-2.0 licence and an attribution note.

    google-cloud-scc-query.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip google-cloud-scc-query.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip google-cloud-scc-query.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Always give the agent an explicit organization, folder or project ID so it does not need to guess the scope.
  • If you have a full finding name, paste it whole so the parent scope and location can be extracted automatically.
  • Review the verbatim error if permission is denied; the skill stops there by design and will not search for credentials.

What's inside

  • references/attribution.md
  • references/finding_schema.md
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.