Skip to content
Get packs

Security Command Center Remediation

Guides agents through fixing Google Cloud Security Command Center findings with approval-gated, reversible steps.

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
5 files

What it does

When you ask an AI agent to fix a Google Cloud Security Command Center finding (such as an over-permissive IAM role, a misconfigured resource, a vulnerability, or a toxic combination of issues), this skill tells the agent to route the finding to a matching playbook, then draft a remediation plan with exact commands, verification steps and rollback steps. The agent must show that plan and wait for your explicit approval before changing anything in your cloud project.

Great for

  • Cloud security or platform engineers triaging Security Command Center findings in a Google Cloud project
  • Teams that want a documented, reviewable remediation plan with rollback steps before any production change
  • Engineers investigating attack paths that span IAM, network and resource configuration

Skip it if

  • General IAM policy queries with no Security Command Center finding, which the skill explicitly excludes
  • Active runtime threats: for these the skill gives containment and investigation guidance rather than automated fixes, so an incident responder should lead
  • Unattended or scheduled pipelines expecting automatic fixes, since the skill is designed to stop at the plan when no user is present

Try asking

  • “Fix the over-privileged service account finding on project my-prod-project and show me the rollback plan first”
  • “Remediate the public Cloud Storage bucket finding flagged by Security Command Center”
  • “Walk me through the toxic combination attack path involving this VM's external IP and firewall rule”
Step-by-step guide: how to use Security Command Center RemediationInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 5 original files, the Apache-2.0 licence and an attribution note.

    google-cloud-scc-remediation.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip google-cloud-scc-remediation.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip google-cloud-scc-remediation.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Give the agent the specific finding category or finding ID so it loads only the relevant playbook.
  • Read the dependency and impact notes in each plan before approving, especially for IAM revocations and external IP removal.
  • Run the agent with a non-production project or read-only credentials first to review the plan without risk.

What's inside

  • references/attribution.md
  • references/remediation_iam.md
  • references/remediation_misconfig.md
  • references/remediation_vuln.md
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.