shivamsriva31093

gcp-cost-anomaly-scan

Use to detect whether any GCP project has experienced an abnormal spend spike in the recent past, indicating possible API-key abuse or compromised credentials. READ-ONLY. Use standalone or as Phase 1b of `gcp-ironclad`.

gcp-credentials-audit

Use to inventory and risk-classify every API key and user-managed service-account key across all accessible GCP projects. READ-ONLY — does not mutate cloud state. Use standalone, or as Phase 1a of the `gcp-ironclad` driver.

gcp-dispute-kit

Use to assemble a dispute-grade evidence packet and ready-to-file letters after GCP API-key fraud (leaked-key abuse, runaway Gemini/Vertex charges). READ-ONLY — mutates nothing. Triggers on "dispute gcp charges", "google cloud fraud refund", "gemini api fraud dispute", "gcp billing dispute", "chargeback google cloud".

gcp-ironclad

Use when securing API keys in GCP, hardening Gemini/Vertex API access against fraud, preventing leaked-key abuse, setting up spend guardrails on Google Cloud, or auditing API key restrictions across a GCP organization. Triggers on phrases like "secure GCP keys", "gemini api fraud", "gcp ironclad", "harden gcp project", "lock down google cloud api keys".

gcp-key-restrictions

Use to apply API-target restrictions to fully-unrestricted GCP API keys, inferring the allow-list from recent usage signals. Idempotent. Honors `--dry-run`. Use standalone or as Phase 3b of `gcp-ironclad`.

gcp-spend-cap-setup

Use to set up Google Cloud hard spend caps (Public Preview, July 2026) with guided discovery, sizing, and post-creation verification. Spend caps are console-only — this skill prepares everything, walks you through the one manual step, and verifies the result. GUIDED — runs only read-only commands. Triggers on "set up spend cap", "hard cap gcp", "cap gemini spend", "spend cap setup".

AI & Automation Listed

gcp-spend-guardrails

Use to apply blast-radius spend controls on GCP projects — quota caps on `generativelanguage.googleapis.com`, Cloud Billing budget alerts, disabling paid APIs idle on projects with no recent legitimate usage, and flagging where a hard spend-cap budget (Public Preview, console-only) should be added. Idempotent. Honors `--dry-run`. Use standalone or as Phase 3a of `gcp-ironclad`.