Gws Modelarmor Create Template

Google Model Armor: Create a new Model Armor template.

Security Scan

The skill is an instruction-only wrapper around the 'gws' CLI to create a Google Model Armor template and its requirements and behavior are generally consistent with that purpose, though it relies on an external shared SKILL.md for authentication which is not present here.

Purpose & Capability

The name/description describe creating a Model Armor template and the only declared requirement is the 'gws' CLI binary, which is exactly what you'd expect for a CLI-based helper. There are no unrelated binaries or unexpected environment variables declared.

Instruction Scope

The runtime instructions are narrowly scoped to running 'gws modelarmor +create-template' with flags. However the skill explicitly instructs the agent to read '../gws-shared/SKILL.md' for auth and global flags; that external file may contain authentication or security rules that influence behavior. The skill correctly calls out that this is a write command and asks for user confirmation before executing.

Install Mechanism

This is an instruction-only skill with no install spec and no code files, so nothing will be written to disk by the skill itself. Lowest-risk install posture.

Credentials

The skill declares no required environment variables or credentials. In practice it depends on auth described in the referenced '../gws-shared/SKILL.md' (not included), so required GCP credentials are implicit rather than declared. That omission is noteworthy but not necessarily malicious — it means you must inspect the shared SKILL.md to understand which credentials will be used and where they are read from.

Persistence & Privilege

always is false and the skill does not request persistent/system-wide changes itself. Autonomous invocation is allowed (platform default), which is expected for a user-invocable skill.

Assessment

This skill appears to be a thin wrapper around the 'gws' CLI to create a Model Armor template. Before installing or running it: 1) Verify you trust the 'gws' binary and where it came from (package/source); 2) locate and review the referenced '../gws-shared/SKILL.md' to see exactly how authentication is performed and which GCP credentials or scopes will be used; 3) confirm with the user before executing since this is a write operation; 4) if you need least-privilege, create a GCP service account with only the permissions required to manage Model Armor templates and ensure the CLI uses that account; and 5) inspect any JSON payloads you pass (the --json flag) and avoid using default 'jailbreak' presets without understanding their contents.

modelarmor +create-template

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

Create a new Model Armor template

Usage

gws modelarmor +create-template --project <PROJECT> --location <LOCATION> --template-id <ID>

Flags

Flag	Required	Default	Description
--project	✓	—	GCP project ID
--location	✓	—	GCP location (e.g. us-central1)
--template-id	✓	—	Template ID to create
--preset	—	—	Use a preset template: jailbreak
--json	—	—	JSON body for the template configuration (overrides --preset)

Examples

gws modelarmor +create-template --project P --location us-central1 --template-id my-tmpl --preset jailbreak
gws modelarmor +create-template --project P --location us-central1 --template-id my-tmpl --json '{...}'

Tips

• Defaults to the jailbreak preset if neither --preset nor --json is given.
• Use the resulting template name with +sanitize-prompt and +sanitize-response.

[!CAUTION] This is a write command — confirm with the user before executing.

See Also

• gws-shared — Global flags and auth
• gws-modelarmor — All filter user-generated content for safety commands