SE

secops-setup-gemini

Assists with the technical configuration and setup of Google SecOps security tools for Gemini CLI.

Install

mkdir -p .claude/skills/secops-setup-gemini && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/7758" && unzip -o skill.zip -d .claude/skills/secops-setup-gemini && rm skill.zip

Installs to .claude/skills/secops-setup-gemini

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

Helps the user configure the Google SecOps Remote MCP Server for Gemini CLI. Use this when the user asks to "set up" or "configure" the security tools for Gemini CLI.
166 chars✓ has a “when” trigger
Intermediate

Key capabilities

  • Validates environment prerequisites
  • Configures Gemini CLI authentication
  • Updates local configuration files
  • Tests SecOps connectivity

How it works

The skill guides the user through installing dependencies, authenticating with Google Cloud, and injecting the Remote MCP Server configuration into the Gemini CLI config file.

Inputs & outputs

You give it
Google Cloud project ID and Chronicle region
You get back
Updated ~/.gemini/config.json

When to use secops-setup-gemini

  • Configure SecOps MCP server
  • Set up Gemini CLI security tools
  • Authenticate Google Cloud for SecOps

About this skill

Google SecOps Setup Assistant (Gemini CLI)

You are an expert in configuring the Google SecOps Remote MCP Server for Gemini CLI users.

Prerequisite Checks

  1. Check for uv: The user needs uv installed.

    • Ask if uv is installed.
    • If not, guide: curl -LsSf https://astral.sh/uv/install.sh | sh
  2. Check Google Cloud Auth:

    • The user must be authenticated with Google Cloud.
    • Ask: "Have you run gcloud auth application-default login?"
    • If not, instruct:
      gcloud auth application-default login
      gcloud auth application-default set-quota-project <YOUR_PROJECT_ID>
      
  3. Gather Configuration:

    • Collect:
      • PROJECT_ID (Google Cloud Project ID)
      • CUSTOMER_ID (Chronicle Customer UUID)
      • REGION (Chronicle Region, e.g., us, europe-west1)

Configuration Steps

Guide the user to update their Gemini CLI configuration at ~/.gemini/config.json.

Instruct the user to add the following under mcpServers:

"remote-mcp-secops": {
  "httpUrl": "https://chronicle.us.rep.googleapis.com/mcp",
  "authProviderType": "google_credentials",
  "oauth": {
    "scopes": ["https://www.googleapis.com/auth/cloud-platform"]
  },
  "timeout": 30000,
  "headers": {
    "x-goog-user-project": "<YOUR_PROJECT_ID>"
  }
}

Verification

After configuration, ask the user to test: gemini prompt "list 3 soar cases"

When not to use it

  • When the user is not using Gemini CLI
  • When the user lacks Google Cloud project access

Prerequisites

uvgcloud CLIGoogle Cloud project

Limitations

  • Requires manual execution of gcloud auth commands
  • Limited to Gemini CLI environments

How it compares

It automates the manual process of gathering environment parameters and editing configuration files, reducing setup errors.

Compared to similar skills

secops-setup-gemini side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
secops-setup-gemini (this skill)17moReviewIntermediate
1password272moReviewIntermediate
senior-security317moReviewAdvanced
fix-dependabot-alerts186moReviewIntermediate

Try saying

Example prompts that trigger this skill in your AI assistant.

You might also like

1password

openclaw

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

2799

senior-security

davila7

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.

3191

fix-dependabot-alerts

microsoft

Fix Dependabot security alerts by updating vulnerable npm dependencies. Use when the user mentions "dependabot", "security alerts", "vulnerability", "CVE", or wants to update packages with security issues.

1872

red-team-tools-and-methodology

davila7

This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS vulnerabilities", "enumerate subdomains", or needs security researcher techniques and tool configurations from top bug bounty hunters.

759

wsdiscovery

BrownFineSecurity

WS-Discovery protocol scanner for discovering and enumerating ONVIF cameras and IoT devices on the network. Use when you need to discover ONVIF devices, cameras, or WS-Discovery enabled equipment on a network.

16

trivy-offline-vulnerability-scanning

benchflow-ai

Use Trivy vulnerability scanner in offline mode to discover security vulnerabilities in dependency files. This skill covers setting up offline scanning, executing Trivy against package lock files, and generating JSON vulnerability reports without requiring internet access.

14

Search skills

Search the agent skills registry