Dangling DNS Finder
anirudhbiyani/findmytakeover
Detect dangling DNS records and subdomain-takeover risks across a multi-cloud environment by running the bundled findmytakeover tool.
Google Cloud Logging — log search, VPC flow logs, firewall logs, audit logs, log buckets and views.
Install GCP Cloud Logging
$ npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install automateyournetwork/netclaw gcp-cloud-logging --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/workspace/skills/gcp-cloud-logging .claude/skills/gcp-cloud-logging && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "gcp-cloud-logging" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/gcp-cloud-logging into .claude/skills/gcp-cloud-logging/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gcp-cloud-logging", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/gcp-cloud-loggingType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install automateyournetwork/netclaw gcp-cloud-logging --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .agents/skills && cp -r skills-src/workspace/skills/gcp-cloud-logging .agents/skills/gcp-cloud-logging && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "gcp-cloud-logging" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/gcp-cloud-logging into .agents/skills/gcp-cloud-logging/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gcp-cloud-logging", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install automateyournetwork/netclaw gcp-cloud-logging --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/workspace/skills/gcp-cloud-logging .cursor/skills/gcp-cloud-logging && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "gcp-cloud-logging" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/gcp-cloud-logging into .cursor/skills/gcp-cloud-logging/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gcp-cloud-logging", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/automateyournetwork/netclaw.git --path workspace/skills/gcp-cloud-logging--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install automateyournetwork/netclaw gcp-cloud-logging --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/workspace/skills/gcp-cloud-logging .gemini/skills/gcp-cloud-logging && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "gcp-cloud-logging" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/gcp-cloud-logging into .gemini/skills/gcp-cloud-logging/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gcp-cloud-logging", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install automateyournetwork/netclaw gcp-cloud-loggingInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .github/skills && cp -r skills-src/workspace/skills/gcp-cloud-logging .github/skills/gcp-cloud-logging && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "gcp-cloud-logging" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/gcp-cloud-logging into .github/skills/gcp-cloud-logging/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gcp-cloud-logging", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install automateyournetwork/netclaw gcp-cloud-logging --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/workspace/skills/gcp-cloud-logging .opencode/skills/gcp-cloud-logging && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "gcp-cloud-logging" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/gcp-cloud-logging into .opencode/skills/gcp-cloud-logging/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gcp-cloud-logging", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
gcp-cloud-logging- GitHub stars
- 676
- Token cost
- ~1.6k tokens
- SKILL.md length
- 603 words
- Files
- 1
- Skills in repo
- 120
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Google Cloud Logging — log search, VPC flow logs, firewall logs, audit logs, log buckets and views.
- Works in 6 steps: Discover logs: list_log_names — find… → Query flow logs: list_log_entries… → Denied traffic: Filter for… → …
- Searching GCP logs
- SKILL.md covers MCP Server, Available Tools (6), Workflow: VPC Flow Log Analysis and Workflow: Firewall Log…, plus 7 more sections
- Calls gcloud; reaches logging.googleapis.com; needs GOOGLE_APPLICATION_CREDENTIALS
What it does
GCP Cloud Logging is an agent skill from automateyournetwork/netclaw. Google Cloud Logging — log search, VPC flow logs, firewall logs, audit logs, log buckets and views. Use when searching GCP logs, investigating denied VPC flow traffic, checking who deleted a VM, analyzing firewall rule hits, or troubleshooting a GCP application error.
Its SKILL.md is about 1.6k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in DevOps & Cloud, covering Cloud networking. It works with Google Cloud. The repository describes itself as: An AI agent that claws through your network. The licence is Apache-2.0.
When your agent uses it
- Searching GCP logs
- Investigating denied VPC flow traffic
- Checking who deleted a VM
- Analyzing firewall rule hits
Example prompts
- “/gcp-cloud-logging”
Workflow steps
6 steps, taken from the first numbered list in SKILL.md.
- Discover logs: list_log_names — find compute.googleapis.com/vpc_flows
- Query flow logs: list_log_entries filtered by
- Denied traffic: Filter for reporter="DEST" and denied connections
- Top talkers: Aggregate by source/destination IP and bytes
- Cross-reference: Use gcp-cloud-monitoring for network metrics during the same period
- Report: Traffic analysis with security findings
What it can do on your machine
Read from SKILL.md and the folder at commit 95bb17e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
gcloud
From the folder's file list and the shell code blocks in SKILL.md.
Network
Hosts in commands or code, which the agent is likely to contact:
logging.googleapis.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names these keys or tokens, usually read from environment variables:
GOOGLE_APPLICATION_CREDENTIALS
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
GCP Cloud Logging loads about 1.6k tokens when it runs. Until then it costs about 72 tokens; SKILL.md has 603 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from automateyournetwork/netclaw at commit 95bb17e, republished under its Apache-2.0 licence (© automateyournetwork). 603 words, ~1,590 tokens.
Download SKILL.mdSave it as
.claude/skills/gcp-cloud-logging/SKILL.md (or your agent's skills folder).- name
- gcp-cloud-logging
- description
- Google Cloud Logging — log search, VPC flow logs, firewall logs, audit logs, log buckets and views. Use when searching GCP logs, investigating denied VPC flow traffic, checking who deleted a VM, analyzing firewall rule hits, or troubleshooting a GCP application error.
- version
- 1.0.0
- license
- Apache-2.0
- tags
- gcp, cloud-logging, logs, flow-logs, audit, firewall-logs
GCP Cloud Logging
MCP Server
- Endpoint:
https://logging.googleapis.com/mcp(Streamable HTTP) - Auth: OAuth 2.0 via Google IAM — service account key (
GOOGLE_APPLICATION_CREDENTIALS) orgcloud auth application-default login - Requires:
GCP_PROJECT_IDenvironment variable
Available Tools (6)
| Tool | What It Does |
|---|---|
list_log_entries | Search and retrieve log entries — the primary tool for debugging, error hunting, and audit |
list_log_names | Discover what logs exist in a project — find available log sources |
get_bucket | Get details of a specific log bucket (storage container for logs) |
list_buckets | List all log buckets in a project |
get_view | Get a specific log view (fine-grained access filter on a bucket) |
list_views | List log views in a bucket |
Workflow: VPC Flow Log Analysis
When investigating GCP network traffic:
- Discover logs:
list_log_names— findcompute.googleapis.com/vpc_flows - Query flow logs:
list_log_entriesfiltered by:- Source/destination IP
- Port and protocol
- Action (ALLOWED/DENIED)
- Time range
- Denied traffic: Filter for
reporter="DEST"and denied connections - Top talkers: Aggregate by source/destination IP and bytes
- Cross-reference: Use
gcp-cloud-monitoringfor network metrics during the same period - Report: Traffic analysis with security findings
Workflow: Firewall Log Investigation
When investigating GCP firewall rule activity:
- Discover logs:
list_log_names— findcompute.googleapis.com/firewall - Query firewall logs:
list_log_entriesfiltered by:- Rule name
- Action (ALLOWED/DENIED)
- Source/destination IP
- Port
- Denied connections: Find blocked traffic patterns
- Rule effectiveness: Which rules are hitting most frequently?
- Report: Firewall activity summary with recommendations
Workflow: Audit Trail Investigation
When investigating GCP API activity (equivalent of AWS CloudTrail):
- Admin activity logs:
list_log_entriesforcloudaudit.googleapis.com/activity— who created/modified/deleted resources? - Data access logs:
list_log_entriesforcloudaudit.googleapis.com/data_access— who read what? - Filter by principal: Narrow to specific user or service account
- Filter by method: Narrow to specific API calls (e.g.,
compute.instances.delete) - Time window: Focus on the incident period
- Report: Audit timeline with responsible principals and actions
Workflow: Troubleshooting with Logs
When debugging a GCP issue:
- Application logs:
list_log_entriesfor the affected service - Error filtering: Filter by severity (ERROR, CRITICAL, EMERGENCY)
- Instance logs: Filter by
resource.labels.instance_idfor specific VMs - Correlate: Match timestamps with
gcp-cloud-monitoringalert violations - Bucket check:
list_bucketsto verify log retention settings - Report: Root cause analysis with log evidence
Show full SKILL.md (249 more words)Show less
Common GCP Log Sources
| Log Name | What It Contains |
|---|---|
compute.googleapis.com/vpc_flows | VPC flow logs — source/dest IP, port, bytes, packets, action |
compute.googleapis.com/firewall | Firewall rule hits — allowed/denied connections with rule name |
cloudaudit.googleapis.com/activity | Admin activity audit — resource create/modify/delete events |
cloudaudit.googleapis.com/data_access | Data access audit — read operations on resources |
cloudaudit.googleapis.com/system_event | System events — Google-initiated actions (live migration, etc.) |
compute.googleapis.com/shielded_vm_integrity | Shielded VM boot integrity verification |
dns.googleapis.com/dns_queries | Cloud DNS query logs |
loadbalancing.googleapis.com/requests | Load balancer access logs |
networksecurity.googleapis.com/firewall_threat | Cloud IDS / Firewall threat detection |
Log Query Filter Examples
# VPC flow logs — denied traffic to port 443
resource.type="gce_subnetwork"
logName="projects/PROJECT/logs/compute.googleapis.com%2Fvpc_flows"
jsonPayload.disposition="DENIED"
jsonPayload.connection.dest_port=443
# Firewall — denied SSH attempts
resource.type="gce_subnetwork"
logName="projects/PROJECT/logs/compute.googleapis.com%2Ffirewall"
jsonPayload.disposition="DENIED"
jsonPayload.connection.dest_port=22
# Audit — who deleted VMs in the last hour
logName="projects/PROJECT/logs/cloudaudit.googleapis.com%2Factivity"
protoPayload.methodName="compute.instances.delete"
timestamp>="2026-01-01T00:00:00Z"
# DNS queries from specific source
resource.type="dns_query"
jsonPayload.sourceIP="10.0.1.50"Important Rules
- Remote MCP server — hosted by Google, no local install needed
- OAuth 2.0 authentication — uses IAM for access control
- Project-scoped — logs are scoped to the configured GCP project
- Log queries have cost implications — Cloud Logging charges for data scanned beyond free tier (50 GB/month free)
- Retention varies — Admin activity logs: 400 days, Data access logs: 30 days (default), VPC flow logs: depends on bucket config
- Record in GAIT — log all investigations for audit trail
Environment Variables
GCP_PROJECT_ID— Google Cloud project IDGOOGLE_APPLICATION_CREDENTIALS— Path to service account key JSON file
Failure Behavior
- On a tool error (timeout, unreachable host, malformed response), report the failure and its error message directly to the user rather than fabricating or guessing at results.
- For a confirmed read-only call, check connectivity and retry once if appropriate. For any call that changes state or sends a message, a timeout does not prove the action failed: inspect current state or delivery status before retrying, preserve the required approval/change gates, and do not repeat an action whose outcome is unknown.
© automateyournetwork, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in workspace/skills/gcp-cloud-logging of automateyournetwork/netclaw.
Open the folder on GitHubat commit 95bb17e
Compare with similar skills
GCP Cloud Logging next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| GCP Cloud Logging this skillautomateyournetwork/netclaw | 676 | — | ~1.6k | Automated safety check: Pass | Apache-2.0 | |
| Dangling DNS Finderanirudhbiyani/findmytakeover | 180 | — | ~1.8k | Automated safety check: Pass | GPL-3.0 | |
| Intrinsic Core Conceptsintrinsic-ai/intrinsic-core | 557 | — | ~2.6k | Automated safety check: Pass | Apache-2.0 | |
| GCP Networkingsickn33/agentic-awesome-skills | 47k | 2 repos | ~2.6k | Automated safety check: Pass | MIT | |
| Google Cloud Filestore Log Troubleshootinggoogle/skills | 21k | — | ~2.9k | Automated safety check: Pass | Apache-2.0 | |
| Implementing GCP Vpc Firewall Rulesmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3k | Automated safety check: Pass | Apache-2.0 |
Similar skills
Intrinsic Core Concepts
intrinsic-ai/intrinsic-core
Intrinsic Core zero-cloud architecture, core primitives (Assets, Services, Skills, Solutions, ICON), CLI inspection commands, and workspace search rules.
GCP Networking
sickn33/agentic-awesome-skills
Configure VPCs, firewall rules, and Cloud NAT. An agent skill from sickn33/agentic-awesome-skills.
- Official
Google Cloud Filestore Log Troubleshooting
google/skills
Diagnoses and resolves Filestore client mount failures on Google Cloud, permission errors (EACCES), and network timeouts (ETIMEDOUT).
Implementing GCP Vpc Firewall Rules
mukul975/Anthropic-Cybersecurity-Skills
Implements and audits GCP VPC firewall rules using gcloud, covering auditing overly permissive rules, creating restrictive ingress/egress rules, hierarchical firewall policies, and monitoring rule…
- Official
Google Cloud Solution Multi Agent Security
google/skills
Designs, deploys, and secures Google Cloud Agent Gateway solutions.
More from automateyournetwork/netclaw
All 120 skills in this repoEVE-NG Lab Topology Design
automateyournetwork/netclaw
Entry point for designing EVE-NG network labs: classifies the request, gathers missing requirements, proposes options and validates the resulting topology.
ACI Policy Change Deployment
automateyournetwork/netclaw
Deploys Cisco ACI policy changes only behind an approved ServiceNow Change Request, capturing pre and post-change fault baselines and rolling back automatically on a fault delta.
Cisco ACI Fabric Health Audit
automateyournetwork/netclaw
Runs a phased health audit of a Cisco ACI fabric through MCP tools: node status, links, tenant and policy review, faults and endpoint learning.
Anta Validation
automateyournetwork/netclaw
Validate Arista EOS network state against ANTA's pre-built 208-test catalogue, with structured pass/fail verdicts.
Arista Cvp
automateyournetwork/netclaw
Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools).
AWS Cloud Monitoring
automateyournetwork/netclaw
AWS CloudWatch monitoring — metrics, alarms, log queries, VPC flow log analysis, network performance.
Related
Works with
Categories
Questions about GCP Cloud Logging
What does GCP Cloud Logging do?
Google Cloud Logging — log search, VPC flow logs, firewall logs, audit logs, log buckets and views. GCP Cloud Logging is an agent skill from automateyournetwork/netclaw. Google Cloud Logging — log search, VPC flow logs, firewall logs, audit logs, log buckets and views.
When should I use GCP Cloud Logging?
GCP Cloud Logging fits situations like: searching GCP logs; investigating denied VPC flow traffic; checking who deleted a VM; analyzing firewall rule hits.
How do I install GCP Cloud Logging in Claude Code?
Run `npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a claude-code`. Or copy the skill folder (workspace/skills/gcp-cloud-logging in automateyournetwork/netclaw) into .claude/skills/gcp-cloud-logging in your project. Claude Code loads it when a task matches its description.
How do I install GCP Cloud Logging in Codex?
Run `npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a codex`. Or copy the skill folder (workspace/skills/gcp-cloud-logging in automateyournetwork/netclaw) into .agents/skills/gcp-cloud-logging in your project. Codex loads it when a task matches its description.
Can I use GCP Cloud Logging in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add automateyournetwork/netclaw --skill gcp-cloud-logging -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/gcp-cloud-logging, .gemini/skills/gcp-cloud-logging, .github/skills/gcp-cloud-logging and .opencode/skills/gcp-cloud-logging in your project.
What does GCP Cloud Logging need to run?
Going by SKILL.md and its folder, GCP Cloud Logging needs the command-line tools its instructions call (gcloud) and credentials named GOOGLE_APPLICATION_CREDENTIALS.
Does GCP Cloud Logging access the network?
SKILL.md names 1 domain. In commands or code: logging.googleapis.com; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.
Is GCP Cloud Logging safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does GCP Cloud Logging use?
GCP Cloud Logging is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does GCP Cloud Logging use?
About 1.6k tokens (SKILL.md is roughly 6.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to GCP Cloud Logging?
Skills that share tags, products or a category with GCP Cloud Logging: Dangling DNS Finder (anirudhbiyani/findmytakeover, 180 stars), Intrinsic Core Concepts (intrinsic-ai/intrinsic-core, 557 stars), GCP Networking (sickn33/agentic-awesome-skills, 47k stars) and Google Cloud Filestore Log Troubleshooting (google/skills, 21k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains GCP Cloud Logging?
automateyournetwork (a GitHub user) maintains it in automateyournetwork/netclaw, which has 676 GitHub stars. The repository holds 120 skills in this directory. The repository was last updated on October 5, 2026.
Source: automateyournetwork/netclaw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.