Build a Google Model Armor security template

Creates a reusable Model Armor template in Google Cloud that defines which models, services, and usage patterns are allowed for your organization.

Best for: Security or ops teams enforcing consistent model-access policies across Google Cloud.

Operations / compliance-securityatomicfor-opsneeds-integration

Topics

agent-skillsai-agentautomationclidiscovery-apigemini-cli-extensiongoogle-admingoogle-apigoogle-calendargoogle-chatgoogle-docsgoogle-drivegoogle-sheetsgoogle-workspaceoauth2rust

Source

Creator's repository · googleworkspace/cli

View on GitHub

License: Apache-2.0

Skill file

Preview skill file
---
name: gws-modelarmor-create-template
description: "Google Model Armor: Create a new Model Armor template."
metadata:
  version: 0.22.5
  openclaw:
    category: "security"
    requires:
      bins:
        - gws
    cliHelp: "gws modelarmor +create-template --help"
---

# modelarmor +create-template

> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.

Create a new Model Armor template

## Usage

```bash
gws modelarmor +create-template --project <PROJECT> --location <LOCATION> --template-id <ID>
```

## Flags

| Flag | Required | Default | Description |
|------|----------|---------|-------------|
| `--project` | ✓ | — | GCP project ID |
| `--location` | ✓ | — | GCP location (e.g. us-central1) |
| `--template-id` | ✓ | — | Template ID to create |
| `--preset` | — | — | Use a preset template: jailbreak |
| `--json` | — | — | JSON body for the template configuration (overrides --preset) |

## Examples

```bash
gws modelarmor +create-template --project P --location us-central1 --template-id my-tmpl --preset jailbreak
gws modelarmor +create-template --project P --location us-central1 --template-id my-tmpl --json '{...}'
```

## Tips

- Defaults to the jailbreak preset if neither --preset nor --json is given.
- Use the resulting template name with +sanitize-prompt and +sanitize-response.

> [!CAUTION]
> This is a **write** command — confirm with the user before executing.

## See Also

- [gws-shared](../gws-shared/SKILL.md) — Global flags and auth
- [gws-modelarmor](../gws-modelarmor/SKILL.md) — All filter user-generated content for safety commands