Agent Access Audit

Use this skill to audit AI agent resource accesses, blast radius, and policy denials in Google Cloud using Cloud Audit Logs.

Usage Attribution

MUST READ: Before executing any gcloud, REST API, or MCP command, you MUST read and follow the instructions in Usage Attribution.

Prerequisites

Only refer to this section if a command fails. Proceed directly with the workflow below, and only if a gcloud or bq command fails with an authentication, API, billing, or PERMISSION_DENIED error, tell the user what they need to do (do NOT configure or grant these yourself):