Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2).
$ npx skills add google/skills --skill iam-helper-for-policy-management -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install google/skills iam-helper-for-policy-management --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/cloud/iam-helper-for-policy-management .claude/skills/iam-helper-for-policy-management && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "iam-helper-for-policy-management" agent skill from https://github.com/google/skills/tree/main/skills/cloud/iam-helper-for-policy-management into .claude/skills/iam-helper-for-policy-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "iam-helper-for-policy-management", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/google/skills/tree/main/skills/cloud/iam-helper-for-policy-managementType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add google/skills --skill iam-helper-for-policy-management -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install google/skills iam-helper-for-policy-management --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/cloud/iam-helper-for-policy-management .agents/skills/iam-helper-for-policy-management && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "iam-helper-for-policy-management" agent skill from https://github.com/google/skills/tree/main/skills/cloud/iam-helper-for-policy-management into .agents/skills/iam-helper-for-policy-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "iam-helper-for-policy-management", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add google/skills --skill iam-helper-for-policy-management -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install google/skills iam-helper-for-policy-management --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/cloud/iam-helper-for-policy-management .cursor/skills/iam-helper-for-policy-management && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "iam-helper-for-policy-management" agent skill from https://github.com/google/skills/tree/main/skills/cloud/iam-helper-for-policy-management into .cursor/skills/iam-helper-for-policy-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "iam-helper-for-policy-management", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/google/skills.git --path skills/cloud/iam-helper-for-policy-management--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add google/skills --skill iam-helper-for-policy-management -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install google/skills iam-helper-for-policy-management --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/cloud/iam-helper-for-policy-management .gemini/skills/iam-helper-for-policy-management && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "iam-helper-for-policy-management" agent skill from https://github.com/google/skills/tree/main/skills/cloud/iam-helper-for-policy-management into .gemini/skills/iam-helper-for-policy-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "iam-helper-for-policy-management", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install google/skills iam-helper-for-policy-managementInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add google/skills --skill iam-helper-for-policy-management -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/cloud/iam-helper-for-policy-management .github/skills/iam-helper-for-policy-management && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "iam-helper-for-policy-management" agent skill from https://github.com/google/skills/tree/main/skills/cloud/iam-helper-for-policy-management into .github/skills/iam-helper-for-policy-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "iam-helper-for-policy-management", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add google/skills --skill iam-helper-for-policy-management -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install google/skills iam-helper-for-policy-management --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/cloud/iam-helper-for-policy-management .opencode/skills/iam-helper-for-policy-management && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "iam-helper-for-policy-management" agent skill from https://github.com/google/skills/tree/main/skills/cloud/iam-helper-for-policy-management into .opencode/skills/iam-helper-for-policy-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "iam-helper-for-policy-management", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
iam-helper-for-policy-managementStreamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2).
Iam Helper For Policy Management is an agent skill from google/skills, published by the product's own GitHub organization. Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2). Manages access control across Resource Manager resources (Organization, Folder, Project) and individual resources. Use when creating, updating, listing, or deleting IAM allow policies or deny policies. Don't use for access denial troubleshooting (use iam-helper-for-troubleshooting), temporary privileged access (use iam-helper-for-privileged-access-management), configuring VPC Service Controls, or managing…
Its SKILL.md is about 1.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 3 other files, including reference files (for example `references/v1-allow-policies.md` and `references/v2-deny-policies.md`).
It sits in Security, covering Cloud networking and Authorization and RBAC. It works with Google Cloud. The repository describes itself as: Agent Skills for Google products and technologies. The licence is Apache-2.0.
2 steps, taken from the step headings in SKILL.md.
Read from SKILL.md and the folder at commit 4b940dd. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
gcloudFrom the folder's file list and the shell code blocks in SKILL.md.
Links to these hosts (documentation or services it may open):
cloud.google.comFrom URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Iam Helper For Policy Management loads about 1.4k tokens when it runs, and up to ~4.9k if it reads all its reference files. Until then it costs about 143 tokens; SKILL.md has 468 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from google/skills at commit 4b940dd, republished under its Apache-2.0 licence (© google). 468 words, ~1,365 tokens.
.claude/skills/iam-helper-for-policy-management/SKILL.md (or your agent's skills folder). This skill also uses 2 other files; get the full folder from GitHub.Orchestrates the lifecycle and management of IAM allow and deny policies across IAM v1 (allow policies) and IAM v2 (deny policies).
IAM operates across two policy paradigms:
When receiving a policy management request, determine whether the operation is Read-Only or Mutating, and whether it targets IAM v1 (Allow Policies) or IAM v2 (Deny Policies):
Read-only actions include the following:
get-iam-policy on project/folder/organization,
or gcloud iam list-testable-permissions //cloudresourcemanager.googleapis.com/projects/PROJECT_ID.gcloud iam policies list or gcloud iam policies get with --attachment-point and --kind=denypolicies.For read-only actions, execute the command autonomously to inspect state, and present the query results clearly to the user.
Mutating operations include the following:
add-iam-policy-binding,
remove-iam-policy-binding, or set-iam-policy across project, folder,
organization, or resource levels (see
references/v1-allow-policies.md).create, update, or delete deny policies on
attachment points
(cloudresourcemanager.googleapis.com/projects/PROJECT_ID,
cloudresourcemanager.googleapis.com/folders/FOLDER_ID, or
cloudresourcemanager.googleapis.com/organizations/ORG_ID) using YAML/JSON
policy files (see
references/v2-deny-policies.md).For mutating operations, follow the Plan & Confirm Protocol below. DO NOT execute mutating commands autonomously without prior user approval.
gcloud commands directly via tool calls without
explicit prior confirmation from the user. When asked to apply a mutating
change, do the following:gcloud command (including all parameters such as --member, --role,
--attachment-point, --kind=denypolicies, and --policy-file).allUsers or allAuthenticatedUsers basic roles (roles/owner,
roles/editor, roles/viewer, roles/admin, roles/writer, and
roles/reader) or broad permissions. Explicitly refuse blanket public
access requests, explain the severe security risks of public project
ownership/access, and propose scoped, least-privileged role bindings for
specific authenticated identities instead.© google, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 2 other files (references) in skills/cloud/iam-helper-for-policy-management of google/skills.
Open the folder on GitHubat commit 4b940dd
Iam Helper For Policy Management next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Iam Helper For Policy Management this skillgoogle/skills | 21k | — | ~1.4k | Automated safety check: Pass | Apache-2.0 | |
| Implementing Zero Trust With Beyondcorpmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~732 | Automated safety check: Pass | Apache-2.0 | |
| Performing GCP Security Assessment With Forsetimukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.8k | Automated safety check: Pass | Apache-2.0 | |
| Implementing GCP Binary Authorizationmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2k | Automated safety check: Pass | Apache-2.0 | |
| Dangling DNS Finderanirudhbiyani/findmytakeover | 180 | — | ~1.8k | Automated safety check: Pass | GPL-3.0 | |
| Intrinsic Core Conceptsintrinsic-ai/intrinsic-core | 562 | — | ~2.6k | Automated safety check: Pass | Apache-2.0 |
mukul975/Anthropic-Cybersecurity-Skills
Configures Google BeyondCorp Enterprise Identity-Aware Proxy (IAP) as the access enforcement point for web applications, defining Access Context Manager access levels from device trust and network…
mukul975/Anthropic-Cybersecurity-Skills
Performing comprehensive security assessments of Google Cloud Platform environments using Forseti Security, Security Command Center, and gcloud CLI to audit IAM policies, firewall rules, storage…
mukul975/Anthropic-Cybersecurity-Skills
Implements GCP Binary Authorization end to end, including creating KMS-backed attestors, Container Analysis notes, deploy-time policies, and signing image attestations, so that only trusted…
anirudhbiyani/findmytakeover
Detect dangling DNS records and subdomain-takeover risks across a multi-cloud environment by running the bundled findmytakeover tool.
intrinsic-ai/intrinsic-core
Intrinsic Core zero-cloud architecture, core primitives (Assets, Services, Skills, Solutions, ICON), CLI inspection commands, and workspace search rules.
BlkLeg/CircuitBreaker
Enforces Circuit Breaker security hardening conventions across backend, frontend, Docker, and nginx.
google/skills
Query Cloud Trace spans, filter by latency thresholds or error status, correlate distributed traces with Cloud Logging, and diagnose latency bottlenecks across Google Cloud services.
google/skills
Manages Google Cloud Privileged Access Manager entitlements and grants: create and edit entitlements, request temporary access, and approve or deny pending grants.
google/skills
Writes Terraform alerting policies for AI agents that emit OpenTelemetry metrics, covering reliability, cost, safety, security and quality signals on Google Cloud.
google/skills
Deploys open models or custom weights from Model Garden to Agent Platform endpoints, checks deployment status and cleans up endpoints, confirming before any change.
google/skills
Searches, manages and scaffolds skills in the Gemini Enterprise Agent Platform Skill Registry using bundled Python scripts and Google Cloud credentials.
google/skills
Designs GCP infrastructure as local Terraform, validates and scans it against best practices, then imports it to Application Design Center for deployment and troubleshooting.
Works with
Categories
Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2). Iam Helper For Policy Management is an agent skill from google/skills, published by the product's own GitHub organization. Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2).
Iam Helper For Policy Management fits situations like: deleting IAM allow policies; access denial troubleshooting (use iam-helper-for-troubleshooting); temporary privileged access (use iam-helper-for-privileged-access-management); configuring VPC Service Controls.
Run `npx skills add google/skills --skill iam-helper-for-policy-management -a claude-code`. Or copy the skill folder (skills/cloud/iam-helper-for-policy-management in google/skills) into .claude/skills/iam-helper-for-policy-management in your project. Claude Code loads it when a task matches its description.
Run `npx skills add google/skills --skill iam-helper-for-policy-management -a codex`. Or copy the skill folder (skills/cloud/iam-helper-for-policy-management in google/skills) into .agents/skills/iam-helper-for-policy-management in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add google/skills --skill iam-helper-for-policy-management -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/iam-helper-for-policy-management, .gemini/skills/iam-helper-for-policy-management, .github/skills/iam-helper-for-policy-management and .opencode/skills/iam-helper-for-policy-management in your project.
Going by SKILL.md and its folder, Iam Helper For Policy Management needs the command-line tools its instructions call (gcloud).
SKILL.md names 1 domain. As links in the text: cloud.google.com. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Iam Helper For Policy Management is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.4k tokens (SKILL.md is roughly 5.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 3.5k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Iam Helper For Policy Management: Implementing Zero Trust With Beyondcorp (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Performing GCP Security Assessment With Forseti (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Implementing GCP Binary Authorization (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Dangling DNS Finder (anirudhbiyani/findmytakeover, 180 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
google (a GitHub organization, an official publisher) maintains it in google/skills, which has 21,097 GitHub stars. The repository holds 150 skills in this directory. The repository was last updated on October 9, 2026.
Source: google/skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
