Google Cloud Waf Security
Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate workloads, identify security requirements, and provide actionable recommendations for IAM, network security, data protection, and operational security.
Install
npx skills add google/skills --skill google-cloud-waf-securitygit clone --depth 1 https://github.com/google/skills.git /tmp/skills
mkdir -p ~/.claude/skills
cp -r /tmp/skills/skills/cloud/google-cloud-waf-security ~/.claude/skills/google-cloud-waf-securityPersonal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.
From the SKILL.md
# Google Cloud Well-Architected Framework skill for the Security pillar
## Attribution
**MUST READ**: Before executing any `gcloud`, REST API, or MCP command, you
MUST read and follow the instructions in
[Usage Attribution](references/attribution.md).
## Overview
The security pillar of the Google Cloud Well-Architected Framework provides
design principles and best practices for building a robust security posture by
integrating security into every layer of the architecture for cloud workloads.
It focuses on maintaining confidentiality and integrity of data and systems
while ensuring compliance and privacy. It provides a structured approach to risk
management, threat defense, and identity control, enabling you to operate cloud
workloads securely and at scale.
## Workflow
When this skill is activated, follow these steps to evaluate and improve the
security posture of the specified Google Cloud workload:
1. **Understand the context**: Ask targeted questions from the **Workload
assessment questions** list to gather information about the user's current
architecture, security requirements, and constraints.
2. **Analyze and identify gaps**: Evaluate the workload against the **Core
principles** and the **Validation checklist** to identify security
vulnerabilities, missing controls, or deviations from best practices.
3. **Formulate recommendations**: Provide actionable, prioritized guidanceDetails
- Skill name
google-cloud-waf-security- Repository
- google/skills
- Path
skills/cloud/google-cloud-waf-security/SKILL.md- License
- Apache-2.0
- Repo updated
- 30 October 2026
FAQ
What does the Google Cloud Waf Security skill do?
Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate workloads, identify security requirements, and provide actionable recommendations for IAM, network security, data protection, and operational security.
How do I install the Google Cloud Waf Security skill?
skills CLI (Claude Code, Cursor, Codex and more): npx skills add google/skills --skill google-cloud-waf-security. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.
Is Google Cloud Waf Security popular?
It lives in google/skills, which has 21,714 GitHub stars and 1,849 forks, and is included in 2 curated skill lists.
Related skills
Agent Platform Skill Registry
22kgoogle/skills
Interact with the Gemini Enterprise Agent Platform Skill Registry to create and search for available skills. Use this skill to enable agents to register functionality or discover new capabilities.
Alloydb Basics
22kgoogle/skills
Manages clusters, instances, and backups for AlloyDB for PostgreSQL, and integrates with AlloyDB Model Context Protocol (MCP) tools for automated database operations. Use when creating, configuring, or administering AlloyDB databases. Do NOT use for general PostgreSQL instances (e.g. Cloud SQL) or other GCP databases.
Bigquery Basics
22kgoogle/skills
Manages datasets, tables, and jobs in BigQuery. Use when you need to interact with BigQuery, run SQL queries, manage BigQuery resources (datasets, tables, views), or perform basic data ingestion and analysis.
Secure Code Guardian
12kJeffallan/claude-skills
Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized statements, configuring CORS/CSP headers, validating input with Zod, and setting up JWT tokens. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention, secure session management, and security hardening. For pre-built OAuth/SSO integrations or standalone security audits, consider a more specialized skill.
Gke Basics
22kgoogle/skills
Manages core GKE cluster provisioning, credentials, Autopilot vs Standard selection, and workload deployment. Use when creating GKE clusters, fetching kubectl credentials, or deciding between Autopilot and Standard modes. Don't use for Workload Identity (use gke-workload-identity), GKE networking (use gke-networking), security hardening (use gke-platform-security or gke-workload-security), or cluster upgrades (use gke-upgrades).
Security Reviewer
12kJeffallan/claude-skills
Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews, dependency audits, secrets scanning, or compliance checks. Produces vulnerability reports, prioritized recommendations, and compliance checklists.
Browse the most popular Claude skills, all security skills, or write your own with the skills generator.