microsoft/azure-skills
37 skills9M installs43.4k starsGitHub
Install
npx skills add https://github.com/microsoft/azure-skillsSkills in this repo
1Microsoft FoundryMicrosoft Foundry skill guides agents through the full Azure AI Foundry lifecycle—containerizing agents, pushing to ACR, creating hosted deployments, running batch and continuous evals, and tracing failures. It routes to focused sub-skills for deploy, invoke, observe, and troubleshoot paths. Solo builders on Azure use it when shipping production agents rather than one-off demos.377kinstalls2Azure Aiazure-ai is a Prism-oriented quick reference for Microsoft Azure AI work, with the published body centered on the Azure AI Content Safety Java SDK. Solo and indie builders shipping SaaS or APIs that accept user-generated text or images install it when they need copy-paste setup for Maven, client builders, and non-obvious SDK patterns such as separate Content Safety versus blocklist clients, BinaryData image payloads, and blocklist create flows that use RequestOptions instead of typed models. The skill description also signals coverage intent for Search, Speech, OpenAI, and Document Intelligence, but the ingested excerpt is the condensed Content Safety guide—use it as a procedural integration cheat sheet while you still validate service-specific APIs in official Azure documentation. It fits the Build phase because you are embedding cloud AI guardrails in your product, not running a one-off marketing experiment. Pair it with your auth and secrets story so endpoint URLs and credentials stay out of commits, and treat severity thresholds and category filters as product policy you configure per use case.375kinstalls3Azure DeployAzure Deploy is a Microsoft agent skill that executes cloud releases for applications that are already planned and validated on Azure. It is built for solo and indie builders who finished the azure-prepare workflow and passed azure-validate, and now need an agent to run azd up, azd deploy, Terraform apply, Bicep deployments, or related az commands without improvising infrastructure from scratch. The skill treats .azure/deployment-plan.md as the source of truth and refuses to start if that file or a Validated status is missing, which keeps agents from skipping planning or safety checks. Triggers match real ship-it language: push to production, go live, publish to Azure, and run azd deploy. It complements procedural planning skills rather than replacing them—users who ask to create a new app, set up infrastructure, or combine build and deploy in one step should use azure-prepare first. After a successful run, the builder has resources deployed according to the prepared plan, with recovery guidance when Azure CLI or IaC commands fail mid-flight.374kinstalls4Azure DiagnosticsAzure Diagnostics walks agents through systematic production troubleshooting on Azure—checking resource health, AppLens insights, logs, and KQL before deep service-specific guides. It routes Container Apps, App Service, Functions, AKS, and messaging incidents to focused playbooks. Solo operators use it when a live Azure app misbehaves and needs fast, evidence-backed triage.374kinstalls5Azure PrepareAzure Prepare is Microsoft's skill for getting applications ready to run on Azure—writing the deployment plan, generating Bicep or Terraform, azure.yaml, and Dockerfiles before any azd up. It enforces plan-first workflow and research-backed architecture choices for solo builders creating or modernizing cloud apps. Use it when standing up Azure infrastructure, not when executing an already validated deploy.374kinstalls6Azure StorageAzure Storage skill helps agents pick the right Azure storage service—Blob for objects, Files for SMB shares, Queues for async work, and Data Lake for analytics—and apply sensible access tiers and redundancy. It prefers Azure MCP storage commands with CLI and SDK fallbacks for uploads and lifecycle management. Solo builders use it when adding durable files, backups, or async queues to an Azure app.374kinstalls7Azure ValidateMicrosoft-guided preflight validation for Azure deployments including IaC, identity, and service-specific readiness.374kinstalls8Entra App RegistrationWalkthrough for Microsoft Entra ID app registration, OAuth configuration, and MSAL-based authentication setup.374kinstalls9Appinsights Instrumentationappinsights-instrumentation is a Microsoft Azure-skills package that walks solo builders through enabling Application Insights on web apps running in Azure App Service. You can stay codeless for supported ASP.NET Core or Node.js workloads by sending the user to the Application Insights blade via a constructed portal URL, or you can modify an ASP.NET Core app by installing Azure.Monitor.OpenTelemetry.AspNetCore and registering OpenTelemetry with UseAzureMonitor before builder.Build(). The skill expects you to resolve subscription_id, resource_group_name, and app_service_name from context or the user. After any code change, deployment is required for telemetry to take effect. It is aimed at indie developers shipping .NET or Node SaaS APIs who need standardized Azure Monitor wiring without reading multiple Learn docs in sequence.374kinstalls10Azure Resource LookupAzure Resource Lookup is a Microsoft agent skill that helps solo builders and small teams answer “what do I have in Azure?” without touching deployment pipelines. It covers prompts like listing web apps, VMs, storage accounts, and container apps, plus broader inventory, tag analysis, and orphaned-resource discovery using dedicated MCP tools and Azure Resource Graph when needed. It is built for operators who already have Azure access and need fast, read-only visibility across one or many subscriptions. The skill deliberately stays out of mutating resources or analyzing bills so you do not confuse inventory with change management or FinOps. Pair it with azure-deploy when you are ready to change resources and azure-cost when you need optimization and spend views.373kinstalls11Azure ComplianceAzure Compliance is a Microsoft agent skill for solo builders and small teams who need structured security and compliance checks on Azure—not ad-hoc portal clicking. It centers on running azqr for broad resource assessment against best practices and complementing that with Key Vault expiration checks for keys, secrets, and certificates. Typical flows start when you are preparing to ship or hardening an environment you already operate: validate configuration, catch misconfigurations and orphans, and answer “what is expiring in Key Vault?” The skill wires expectations to MCP capabilities for subscription listing and vault inspection rather than inventing audit results. Use it as a checker before major releases and on a recurring Operate cadence; follow fixes with deploy or remediation workflows outside this read-and-audit skill.373kinstalls12Azure RbacGuides Azure RBAC selection and implementation with CLI, Bicep, and permission prerequisites for assigning roles to identities.373kinstalls13Azure AigatewayQuick reference for building and operating Azure API Management as an AI gateway using ARM .NET SDK and policy best practices.373kinstalls14Azure KustoSkill for querying and exploring Azure Data Explorer with KQL for log, telemetry, and time series operational analytics.373kinstalls15Azure Resource VisualizerMicrosoft skill that inspects Azure resource groups and generates Mermaid architecture diagrams with relationship documentation.373kinstalls16Azure MessagingAzure Messaging is a Microsoft agent skill for solo builders and small teams who ship workloads on Azure Event Hubs or Service Bus and hit SDK-level failures instead of portal-only issues. It walks through connection and authentication problems, AMQP link errors, idle timeouts and slow reconnects, send timeouts, message lock lost or expired scenarios (including batch and session consumers), duplicate events, offset reset surprises, and dead-letter queue diagnosis. The skill maps symptoms to likely causes—wrong connection string or RBAC, firewall or private endpoint blocks, prefetch and concurrency mis-tuning, checkpoint store misconfiguration, or processor host lifecycle bugs—and points to language-specific SDK notes plus when to enable client logging. It is meant to be invoked when stack traces or metrics already implicate the messaging client, not when you are still choosing between Kafka and Service Bus. Pair it with Azure MCP tools for namespace inspection when the agent can call cloud APIs. Expect intermediate-to-advanced familiarity with queues, topics, partitions, and consumer groups.363kinstalls17Azure Hosted Copilot SdkAzure Hosted Copilot SDK is Microsoft's entry skill for repos using @github/copilot-sdk—it detects CopilotClient usage, scaffolds new services, adds SDK sidecars to existing repos, and routes deployment through Azure sub-skills. Agents must invoke it before azure-prepare when SDK markers are present. Solo builders use it to ship Copilot-powered assistants on Azure without guessing infra wiring.346kinstalls18Azure ComputeAzure Compute is a router skill for Virtual Machines and scale sets—it directs agents to the right workflow for VM sizing, pricing, connectivity troubleshooting, capacity reservation groups, or Essential Machine Management enrollment. Microsoft maintains separate playbooks per intent so agents read the matched workflow before touching references. Platform engineers use it when Azure VM questions need structured routing instead of generic advice.317kinstalls19Azure Cloud MigrateAzure Cloud Migrate provides detailed guidance for moving Google App Engine apps to Azure App Service—mapping services, translating app.yaml into Bicep, and swapping Datastore, Cloud SQL, Pub/Sub, and IAM for Azure equivalents. It includes plan-tier tables and concrete configuration examples. Teams use it when retiring GAE and need a structured Azure landing path without re-architecting blind.307kinstalls20Azure QuotasAzure Quotas helps agents check and manage Azure service limits before deployments hit quota-exceeded errors. It mandates the az quota extension, warns against misleading Portal no-limit values, and maps ARM resource types to quota names. Platform engineers use it when picking regions, validating vCPU headroom, or submitting increase requests for production rollouts.244kinstalls21Azure UpgradeAzure Upgrade assesses and automates upgrades within Azure—Functions Consumption to Flex Consumption, legacy Java com.microsoft.azure to com.azure SDKs, and Redis OSS or Enterprise to Azure Managed Redis. It enforces assessment-first phases, user confirmation on destructive actions, and idempotent scripts. Teams use it when modernizing live workloads rather than greenfield deploys.237kinstalls22Azure Enterprise Infra PlannerAzure Enterprise Infra Planner helps cloud architects turn workload descriptions into WAF-aligned Azure landing zones—hub-spoke networks, private endpoints, DR topologies, and subscription-scope Bicep or Terraform. It runs gated phases with MCP doc research, user-approved plan JSON, and validated IaC before deploy. Platform teams use it instead of app-centric azure-prepare when designing enterprise infrastructure from scratch.211kinstalls23Azure Cost OptimizationAzure Cost Optimization analyzes Azure subscriptions for savings—orphaned resources, VM and Redis rightsizing, budget anomalies, and waste grounded in Cost Management and Azure Quick Review data. It validates CLI extensions and permissions before running analysis and can scope to Redis-only reports. FinOps and platform engineers use it when Azure bills spike and need actionable cleanup and resize recommendations.207kinstalls24Azure KubernetesAzure Kubernetes skill supplies fix patterns for AKS Automatic compatibility—adding resource requests, dropping capabilities, seccomp profiles, and other safeguard-aligned YAML changes mapped to constraint IDs. It warns when workloads are genuinely incompatible rather than silently weakening security. Solo builders use it when AKS Automatic rejects manifests during ship.204kinstalls25Azure CostUnified Azure cost management skill for billing analysis, projections, and optimization—not for provisioning new infrastructure.179kinstalls26Airunway Aks SetupMicrosoft skill for end-to-end AI Runway setup on AKS, including prerequisites, GPU cost awareness, and related skills for cluster provisioning and diagnostics.124kinstalls27Entra Agent Identra-agent-id is a Microsoft-authored agent skill for provisioning and operating OAuth-capable identities tailored to AI agents in Entra ID. Solo builders and small teams shipping agents that call Microsoft 365 or Graph need distinct identities per agent instance, clear audit trails, and permission grants that do not collapse into a single shared app secret. The skill walks through creating Agent Identity Blueprints and BlueprintPrincipals via Microsoft Graph, minting per-instance Agent Identities, and wiring runtime authentication patterns including fmi_path exchange, OBO, cross-tenant scenarios, and optional SDK sidecars for .NET or polyglot hosts. It complements but does not replace standard Entra app registration or Azure RBAC skills, and it is separate from Microsoft Foundry agent authoring. Use it when you are hardening Ship-phase security for autonomous or delegated agents rather than when you only need a human-facing SSO app. Successful runs yield blueprint artifacts, principal records, and documented exchange configuration aligned with Microsoft’s Agent ID product model.99.1kinstalls28Azure ObservabilityAzure Observability is a Microsoft agent skill that steers coding agents toward the right Azure telemetry surfaces—Azure Monitor, Application Insights, Log Analytics, alerts, and workbooks—when you need metrics, APM, distributed tracing, KQL queries, or interactive operational reports. Solo builders running APIs or SaaS on Azure use it during Operate when incidents, latency spikes, or missing dashboards need fast, tool-correct commands rather than guessed az CLI syntax. The skill favors the Azure MCP server when enabled, listing concrete command names for metrics and log queries alongside equivalent Azure CLI paths. It clearly defers SDK instrumentation to appinsights-instrumentation, cluster analytics to azure-kusto, and spend work to azure-cost-optimization so you do not mix concerns. Expect agent-assisted investigation and dashboard setup, not a turnkey monitoring policy; you still own retention, alert rules, and access control in your subscription.98.2kinstalls29Azure ReliabilityAzure Reliability is a Microsoft agent skill for solo and indie builders running serverless APIs on Azure Functions who need a structured reliability review instead of guessing about zones and failover. It activates when you ask to assess reliability, check for single points of failure, enable zone redundancy, or set up multi-region disaster recovery for Functions. The workflow scans your deployed environment (Resource Graph plus CLI), presents a feature-pivoted checklist, and walks through staged remediation with explicit user confirmation before changing production. That pairing of assessment and guided fixes fits builders who ship quickly but cannot afford silent misconfigurations in storage, health probes, or regional placement. It is intentionally narrowed to Functions in this version, so you get depth on the runtime you likely use for background jobs and HTTP triggers rather than a generic cloud checklist. Use it after initial deploy and whenever you harden for growth traffic or compliance expectations around availability.58.7kinstalls30Azure Postgresazure-postgres is an agent skill from Microsoft’s azure-skills collection aimed at solo and small-team builders who deploy on Azure and need guided help around Azure Database for PostgreSQL—creation, configuration, connectivity, and operational tasks aligned with Microsoft’s documented Azure patterns. Prism’s ingest surface is minimal (skills.sh listing and GitHub source metadata), so treat this entry as a cloud infrastructure integration skill you invoke when Postgres on Azure is part of your stack, not as a generic SQL tutorial. Pair it with your app’s ORM or migration workflow in Build, then reuse the same mental model in Operate when tuning backups, networking, and environment separation. Complexity is intermediate to advanced: you should already have an Azure subscription, understand connection strings and secrets handling, and expect the agent to suggest Azure CLI or portal-aligned steps. Review Microsoft’s repo and Prism security audits before granting cloud credentials to an agent.27.8kinstalls31Markdown Token Optimizermarkdown-token-optimizer is a Microsoft azure-skills package aimed at solo and indie builders who ship with agent-assisted workflows and accumulate heavy Markdown in SKILL.md files, reference folders, and runbooks. Long docs steal tokens from implementation work; this skill focuses on compressing or restructuring Markdown so agents still get headings, steps, and constraints without loading redundant prose. It is most relevant during Build when you are polishing agent skills and internal docs, and again in Ship when README and ops notes grow before release. Because azure-skills skew toward Azure deployment and validation stacks, treat it as a context-budget tool in multi-phase projects—not a replacement for clear writing. Install when your agent sessions routinely truncate or skip sections of your own documentation; pair it with a full documentation skill for syntax and GFM quality.1kinstalls32SenseiSensei is an entry in Microsoft’s azure-skills repository, distributed for agent environments that load procedural packages from skills.sh. Prism catalogs it for solo and indie builders who ship on Azure and want a named skill slot alongside other first-party Azure automations. The published readme in this ingest is metadata-only, so the practical promise is an Azure-aligned coaching or workflow layer—sensei as a guide through cloud tasks—rather than a narrow single API wrapper. Expect it to sit in multi-phase journeys: while integrating services during build, hardening before ship, and tuning deployments under operate. Pair it with your agent’s Azure CLI or SDK context and verify each invoked procedure against current Microsoft docs because skill bodies can evolve independently of Prism tags.951installs33Skill AuthoringSkill Authoring is a Microsoft Azure–oriented meta skill for defining and packaging agent skills that live in the azure-skills repository. Solo and indie builders who ship agents on Claude Code, Cursor, or Codex use it when they need to add or refine SKILL.md files so downstream tasks—deploy prep, validation, integration calls—invoke the right procedural knowledge with consistent naming and structure. The ingested SKILL.md body in Prism is thin (mostly catalog metadata), so treat the skill as a pointer into Azure’s skill-development lane rather than a full tutorial in one page. It matters because Azure-heavy builders otherwise scatter one-off prompts; a dedicated authoring skill keeps agent-tooling artifacts versioned beside other Azure skills. Pair it with brainstorming or writing-plans when a new capability needs scoping before you commit file layout and invokeWhen triggers.934installs34File Test BugThe file-test-bug skill is a Microsoft azure-skills catalog entry aimed at bridging automated or manual test failures into actionable bug records. Public metadata shows strong adoption signals on skills.sh, but the published SKILL body is minimal, so agents should treat it as a named hook inside the broader Azure skills collection rather than a fully documented runbook. Solo builders using Azure-oriented agent stacks typically reach for it during ship when tests fail and they need consistent defect capture instead of ad-hoc notes. Until richer instructions are published upstream, pairing this skill with sibling Azure test and review skills is prudent. Prism lists it so teams can discover the workflow by name and monitor security posture on the detail page while Microsoft expands documentation.894installs35Analyze Test Runanalyze-test-run is a Microsoft azure-skills agent skill focused on dissecting test and pipeline runs after they finish. Solo and indie builders shipping .NET, APIs, or SaaS on Azure install it when a run fails or looks suspicious and they need structured interpretation instead of scrolling raw logs in chat. The skill fits the Ship journey shelf under testing: it assumes you already have a reproducer in CI or locally and want the agent to connect errors to likely causes and follow-up actions. It is phase-specific—not a planning or SEO tool— and complements other Azure skills that prepare infrastructure or validate deployments. Use it when gates block merge or release; skip it when you have not run tests yet or need to author new test cases from scratch.794installs36Investigate Integration Testinvestigate-integration-test is an agent skill from microsoft/azure-skills that walks solo and indie builders through systematic diagnosis when Azure-backed integration tests fail or flake. It is aimed at developers shipping APIs, SaaS backends, or CLIs that depend on Azure SDKs, ARM resources, or managed identity in pipeline jobs. Use it when a test suite that hits real or sandbox Azure endpoints breaks after a dependency bump, config change, or new feature branch—rather than guessing from raw stack traces. The skill emphasizes reproducing locally, reading assertion and HTTP/service errors, checking credentials and subscription context, and separating test bugs from infrastructure or quota limits. It complements one-off unit tests by focusing on cross-service behavior typical of integration suites in GitHub Actions or similar CI. Outcomes are a clear failure hypothesis, ordered remediation steps, and criteria for when to rerun the full matrix. Pair it with your repo’s existing Azure prepare-and-deploy skills when failures appear right after environment or secret changes.65installs37Submit Skill Fix Prsubmit-skill-fix-pr is a narrow Microsoft Azure Skills utility for agents helping you contribute corrections back to the azure-skills repo. Prism lists it for solo builders who maintain custom agent packs or want to fix a broken Azure skill they depend on, rather than for routine app feature work. Public listing metadata emphasizes GitHub provenance and skills.sh ranking; treat in-repo SKILL.md as the authority when you clone azure-skills locally. Expect git branch, edit, and PR steps aligned with Microsoft’s contribution expectations. Skip it if you only consume skills and never open upstream PRs.64installs