The Agent Skills Directory

Command Execution: The skill generates and executes gcloud CLI commands to manage security policies within Google Cloud Platform. This behavior is consistent with the skill's primary function as a network security management tool and follows established patterns for cloud administration.
Vendor Telemetry and Attribution: The skill incorporates a metrics tracking mechanism using the CLOUDSDK_METRICS_REQUEST_ATTRIBUTION environment variable. This is transparently documented as a way for the vendor to monitor skill adoption and does not involve the collection of sensitive user data.
Rule Transformation Logic: A local Python script (scripts/upgrade_policy.py) is used to automate the complex remapping of WAF signatures and rulesets. The script relies on safe parsing methods such as json.loads and ast.literal_eval to process policy data and generate updated configurations.
Operational Safety Guardrails: The skill implements specific checks to prevent common misconfigurations during the upgrade process, such as validating the 200-rule quota limit for Cloud Armor and ensuring appropriate priority spacing for rules deployed in preview mode.
Security Configuration Guidance: The documentation provides clear instructions for setting up the environment, including the necessary IAM roles (roles/compute.securityAdmin, roles/logging.viewer) and the use of standard Google Cloud authentication methods.

cloud-armor-crs-rule-upgrader