google / google/skills

Feature request: New skill "gcp-agent-security-audit" for proactive threat detection

Open
#160 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
20k
Forks
1.6k
Avg merge
3d 13h
Merged PRs (30d)
1

Description

### Proactive Security Audit Skill Proposal

**Context:**
As an active contributor and developer, I’ve been assessing our current skill set and identified an opportunity to strengthen our security-first roadmap. While we have excellent troubleshooting tools, we lack a native, proactive mechanism for agent self-auditing.

**Proposal:**
I propose adding a new skill: `gcp-agent-security-audit`. This skill will leverage BigQuery diagnostics to analyze agent interaction logs, specifically targeting anomaly detection and prompt injection patterns.

**Proposed Scope:**
- **Anomaly Detection:** Using BigQuery ML to flag deviations in agent behavior.
- **Security Reporting:** Providing actionable insights into an agent's historical interactions.
- **Integration:** Ensuring seamless integration with our existing agent platform workflows.

**Proposed Structure:**
- `skills/security/gcp-agent-security-audit/`
- `SKILL.md` (Security best practices documentation)
- `audit.py` (Core logic for BigQuery diagnostic integration)

I have the architectural plan ready and am eager to contribute this. I'd appreciate any architectural feedback or preferred patterns you'd like me to follow before I push the initial implementation.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the proposed structure under skills/security/gcp-agent-security-audit/ and the repository’s existing skill patterns. The main entry points mentioned are SKILL.md and audit.py, with BigQuery diagnostics and BigQuery ML as the integration focus. Done means the skill supports anomaly detection, security reporting, and integration with the existing agent platform workflows.

Written by the indexing model from the issue text.

Assessment

Tech stack
gcp, google-cloud, python
Domain
cloud, data, machine-learning, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.