| name | gcli |
| description | Use Google Cloud CLI (gcloud) for project/account checks and Google API operations. Use when users ask for gcloud commands, Google Cloud auth, project configuration, IAM, or cloud resource inspection and updates. |
Google CLI (gcloud) wrapper
Use this skill as a lightweight wrapper around the local Google Cloud CLI.
Scope
- Use
gcloud directly for command execution.
- Keep commands explicit and non-interactive where possible.
- Prefer read-only checks first, then apply mutations only when requested.
Auth and configuration
Preferred auth order:
- Existing local login/ADC context
- Service account key file via
GOOGLE_APPLICATION_CREDENTIALS
- Explicit
gcloud auth flows only when necessary
Check active context before doing real work:
node --import tsx skills/gcli/assets/ensure.ts
The ensure script validates:
gcloud binary is installed and reachable in PATH- current active account (if configured)
- current active project (if configured)
- current default compute region/zone (if configured)
If you need to authenticate manually:
gcloud auth list --format="value(account,status)"
gcloud config list --format="yaml(core.account,core.project,compute.region,compute.zone)"
Command patterns
Project and config:
gcloud projects list --limit=20
gcloud config set project <PROJECT_ID>
IAM and principals:
gcloud projects get-iam-policy <PROJECT_ID> --format=json
gcloud iam service-accounts list --project <PROJECT_ID>
GKE/Compute examples:
gcloud container clusters list --project <PROJECT_ID>
gcloud compute instances list --project <PROJECT_ID>
Execution rules
- Always run a context check first (
skills/gcli/assets/ensure.ts).
- Use
--project explicitly for commands touching resources.
- Use structured output (
--format=json) when results feed downstream tools.
- Avoid long interactive commands unless user explicitly asks.
- Never print or echo sensitive credentials.
Failure handling
- If
gcloud is missing, stop and ask user to install Google Cloud CLI.
- If account/project is missing, return exact setup commands and pause.
- If permissions fail, report the required role/permission from the error and stop.
