Automated GCP API-key audit + safe spend hardening, run from Claude Code.
Skill Claude CodeCodex
Use to detect whether any GCP project has experienced an abnormal spend spike in the recent past, indicating possible API-key abuse or compromised credentials. READ-ONLY. Use standalone or as Phase 1b of gcp-ironclad.
Skill Claude CodeCodex
Use to inventory and risk-classify every API key and user-managed service-account key across all accessible GCP projects. READ-ONLY — does not mutate cloud state. Use standalone, or as Phase 1a of the gcp-ironclad driver.
Skill Claude CodeCodex
Use to assemble a dispute-grade evidence packet and ready-to-file letters after GCP API-key fraud (leaked-key abuse, runaway Gemini/Vertex charges). READ-ONLY — mutates nothing. Triggers on "dispute gcp charges", "google cloud fraud refund", "gemini api fraud dispute", "gcp billing dispute", "chargeback google cloud".
Skill Claude CodeCodex
Use when securing API keys in GCP, hardening Gemini/Vertex API access against fraud, preventing leaked-key abuse, setting up spend guardrails on Google Cloud, or auditing API key restrictions across a GCP organization. Triggers on phrases like "secure GCP keys", "gemini api fraud", "gcp ironclad", "harden gcp…
Skill Claude CodeCodex
Use to apply API-target restrictions to fully-unrestricted GCP API keys, inferring the allow-list from recent usage signals. Idempotent. Honors --dry-run. Use standalone or as Phase 3b of gcp-ironclad.
Skill Claude CodeCodex
Use to set up Google Cloud hard spend caps (Public Preview, July 2026) with guided discovery, sizing, and post-creation verification. Spend caps are console-only — this skill prepares everything, walks you through the one manual step, and verifies the result. GUIDED — runs only read-only commands. Triggers on "set up…
Skill Claude CodeCodex
Use to apply blast-radius spend controls on GCP projects — quota caps on generativelanguage.googleapis.com, Cloud Billing budget alerts, disabling paid APIs idle on projects with no recent legitimate usage, and flagging where a hard spend-cap budget (Public Preview, console-only) should be added. Idempotent. Honors…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: