Menu
Writing idiomatic, safe, and reviewable Bicep templates for Azure resources.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
ACR integration for AKS Automatic. Teaches attaching an ACR, image reference conventions (digest pinning, no :latest), and pull-secret-free authentication via the managed identity.
Non-blocking cluster status peek — run at the end of Phases 3, 4, 5 to check AKS provisioning progress without hanging.
Voice, tone, and interaction patterns for Kickstart agents.
Configure Infrastructure phase playbook — launch the dedicated Kickstart cluster-setup view, which collects and creates the Azure resources (subscription, resource group, AKS Automatic cluster, ACR) and hands the results back to the chat.
Deploy phase playbook — build, push, apply with Azure CLI and kubectl.
Design phase playbook — propose target architecture on AKS Automatic.
| name | kickstart-bicep-authoring |
| description | Writing idiomatic, safe, and reviewable Bicep templates for Azure resources. |
| disable-model-invocation | true |
Bicep is the preferred IaC language for Azure deployments in Kickstart.
// Parameters first
param location string = resourceGroup().location
param name string
// Variables derived from params
var uniqueSuffix = uniqueString(resourceGroup().id)
// Resources
resource storageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' = {
name: '${name}${uniqueSuffix}'
location: location
sku: { name: 'Standard_LRS' }
kind: 'StorageV2'
}
// Outputs last
output accountName string = storageAccount.name
output primaryEndpoint string = storageAccount.properties.primaryEndpoints.blob
@2023-01-01 not @latest.uniqueString() for globally unique names — storage accounts, key vaults, ACR.existing resources — reference resources not managed by this template with existing.Always call azure.validate_bicep before presenting a template to the user. Fix all errors; warnings are acceptable if explained.
minimalTlsVersion: '1.2'.0.0.0.0/0 inbound rules without explicit user approval.