From gcp-inspector
Verify the gcp-inspector connector's prerequisites and write its config. Idempotent.
npx claudepluginhub abnejllc/grc --plugin gcp-inspector# /gcp-inspector:setup Prepares the gcp-inspector connector. Confirms `gcloud` CLI is installed and authenticated, writes `~/.config/claude-grc/connectors/gcp-inspector.yaml`, and runs a read-only health check. ## How to run Exits 0 on success, 2 on missing/invalid credentials, 5 on missing `gcloud` binary. ## Credential precedence Honors the standard gcloud credential chain: 1. `--project` / `--region` flags (written to config) 2. `GOOGLE_APPLICATION_CREDENTIALS` env var pointing at a service-account JSON 3. `gcloud config get-value project` and `gcloud config get-value compute/reg...
/setupInitializes or resumes project setup via interactive Q&A, creating conductor/ artifacts for product definition, guidelines, tech stack, workflow, and style guides.
/setupDetects ghost or inconsistent claude-hud plugin installations (orphaned cache, stale registry, temp files) and offers cleanup on user confirmation for macOS/Linux/Windows.
/setupChecks local Codex CLI readiness, prompts to install if unavailable via npm, and optionally toggles stop-time review gate.
/setupGuides enterprise admins through Claude Office add-in setup for Vertex AI, Bedrock, or custom gateway; provisions credentials and generates deployable manifest.xml.
/setupRuns interactive setup wizard: detects AI providers (Codex, Gemini, Ollama, etc.), installs missing ones via Bash, configures auth, and sets up RTK token optimization.
Prepares the gcp-inspector connector. Confirms gcloud CLI is installed and authenticated, writes ~/.config/claude-grc/connectors/gcp-inspector.yaml, and runs a read-only health check.
bash plugins/connectors/gcp-inspector/scripts/setup.sh [--project=<id>] [--region=<region>]
Exits 0 on success, 2 on missing/invalid credentials, 5 on missing gcloud binary.
Honors the standard gcloud credential chain:
--project / --region flags (written to config)GOOGLE_APPLICATION_CREDENTIALS env var pointing at a service-account JSONgcloud config get-value project and gcloud config get-value compute/regiongcloud auth application-default loginThe setup script runs gcloud auth list and gcloud projects describe to verify the resolved identity has access before writing the config.
Check gcloud CLI is installed (gcloud --version).
Resolve credentials (gcloud auth list --filter=status:ACTIVE).
Resolve project (from --project, CLOUDSDK_CORE_PROJECT, or gcloud config).
Verify the caller can at least gcloud projects describe the project (read IAM policy check).
Write config:
version: 1
source: gcp-inspector
source_version: "0.1.0"
project_id: "<project>"
project_number: "<number>"
caller: "<email-or-sa>"
default_region: "us-central1"
defaults:
services: ["iam", "storage", "logging", "kms", "compute"]
gcp-inspector:setup ✓
gcloud: 557.0.0
project: acme-prod (number 1234567890)
caller: ethan@example.com
default region: us-central1
config: ~/.config/claude-grc/connectors/gcp-inspector.yaml
Next: /gcp-inspector:collect
brew install --cask google-cloud-sdk or https://cloud.google.com/sdk/docs/install.gcloud auth login then gcloud auth application-default login.resourcemanager.projects.get. Required role: at minimum roles/viewer; for a full scan, roles/iam.securityReviewer + roles/cloudkms.viewer + roles/logging.viewer.Yes. Overwrites config; preserves cached findings.