iam-recommendations-fetcher
Fetches raw IAM recommendations and associated security insights
by googleFree
Description
IAM recommendations fetcher is an agent skill for retrieving raw IAM recommendations and the security insights that go with them from Google Cloud. Recommendations are suggestions about access, for example where a principal has more permissions than it appears to use. The skill is scoped to one target: an organization, a folder or a project, written in the formats organizations, folders or projects followed by an identifier. It validates the target first, then retrieves the recommendations through MCP tools, the gcloud command-line tool, or direct API calls, and it covers how to handle the common API errors when retrieval fails. It is meant as a data-gathering step, so you or another agent can review the raw recommendations and decide what to change. The skill is useful for security teams doing an access review across a large environment. The skills.sh listing shows a Snyk Fail result for this skill, alongside Gen Agent Trust Hub and Socket passing, so review it before installing. It is published by Google under the google skills repository, with about 1.2K installs.…
Highlights
- Fetches IAM recommendations and insights
- Scoped to an organization, folder or project
- Validates the target format first
- Uses MCP tools, gcloud or the API
- Covers common API errors
Ratings & Reviews
No ratings yet
Be the first to rate iam-recommendations-fetcher.
People also visit
iam-helper-for-policy-management
Streamlines the creation, modification, and management of IAM allow policies
iam-helper-for-policy-simulator
Safely simulates and applies Identity and Access Management (IAM) v1
iam-helper-for-privileged-access-management
Manages the end-to-end lifecycle of on-demand, temporary access
iam-helper-for-troubleshooting
Diagnoses, remediates, and manages Identity and Access Management
agent-platform-eval-flywheel
Measures and improves the quality of AI models and agents on Google Cloud
iam-recommendations-fetcher FAQ
What does it return?
Raw IAM recommendations and the associated security insights for the chosen scope.
What target formats are valid?
organizations followed by an ID, folders followed by an ID, or projects followed by a project ID.
How is data retrieved?
Through MCP tools, the gcloud command-line tool or direct API calls, as the skill describes.
Are there security warnings?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Fail. A Warn or Fail is worth reading before you install.
How do I install it?
Run npx skills add https://github.com/google/skills --skill iam-recommendations-fetcher.
What are the best iam-recommendations-fetcher alternatives?
Popular alternatives to iam-recommendations-fetcher include iam-helper-for-policy-management, iam-helper-for-policy-simulator and iam-helper-for-privileged-access-management. See all iam-recommendations-fetcher alternatives