ai-foundry-posture-checkAssess security, reliability, and cost posture of Azure OpenAI and AI Foundry deployments. Detects anti-patterns like API keys instead of Managed Identity, public endpoints, disabled content filtering, deprecated models, over-provisioned PTU, missing AI…capacity-planningAssess Azure resource capacity, quota utilization, and growth trends to prevent outages from resource exhaustion. Use when asked about capacity, quotas, scaling readiness, load testing prep, or growth projections.compliance-governance-auditAudit Azure environment for compliance and governance posture. Checks Azure Policy, RBAC, tagging, resource locks, naming conventions, and regulatory alignment. Use when asked about compliance, governance, audit readiness, or policy violations.defender-secure-score-monitorMonitor and improve Microsoft Defender for Cloud Secure Score. Tracks score trends, identifies quick wins, checks Defender plan coverage, and highlights critical security recommendations. Use when asked about secure score, security posture, or Defender status.digital-native-governance-checkAssess Azure governance maturity for Digital Natives and startups. Detects common anti-patterns like incomplete Service Health alerts, flat subscription topology, excessive RBAC, missing budget alerts, no Managed Identity usage, and unprotected web apps. Use…finops-intelligenceComprehensive FinOps analysis combining cost optimization, waste identification, and chargeback reporting. Use when asked about reducing Azure spend, finding unused resources, cost per team, chargeback, showback, or cost anomalies.incident-postmortem-generatorGenerate a blameless incident postmortem from the current or recent SRE Agent investigation. Use after an incident is resolved, when asked for a postmortem, RCA report, or lessons learned document.well-architected-reviewRun a Well-Architected Framework (WAF) review against Azure resources in scope. Use when asked about best practices, architecture review, WAF assessment, or pillar compliance (Reliability, Security, Cost, Operational Excellence, Performance Efficiency).
explorador de repositórios
Azure · Repositórios e skills representativas - Página 2
Visão por repositório de 677 skills coletadas em 118 repositórios do GitHub.
review-doc-commentsWrite and review Rust public API documentation for clarity, accuracy, Microsoft style, useful links and sections, and buildable examples. Use for public API reviews even when doc comments did not change.export-apiGenerate api.md artifacts for changed Rust crates after code generation or source edits.agentic-workflowsRoute gh-aw workflow design/create/debug/upgrade requests to the right prompts.analyze-codeRun repository code analysis as a final check after completing prompts, targeting every changed Rust package by PackageNames.create-hotfixCreate a hotfix (patch) release branch for an Azure SDK Rust crate.create-crateCreate a new Azure SDK crate from a TypeSpec specification.update-emitterUpdate the TypeSpec emitter for Rust and optionally regenerate all clientslint-markdownCheck and fix formatting and other issues in markdown files using markdownlint-cli2.
asim-parser-create-parameter-parserThis creates the parameterized version of the ASIM schema parser. You should already have the parameter-less version of the parser to help facilitate the parameter parser creation.asim-parser-create-parserThis starts the process of creating a new ASIM schema parser by generating the initial version of the parser based on the requirements gathered. Use this skill when you have gathered all necessary information for the new ASIM parser and are ready to create…asim-parser-pr-reviewerReviews pull requests for ASIM parser changes and summarizes suggestions. This is not to be called by asim-parser-creator-orchestrator or when creating ASIM parsers in general. This is strictly for reviewing pull requests after necessary workflows have ran.asim-parser-github-pr-packagerPackages the created and validated ASIM schema parser into a GitHub PR for the Azure-Sentinel repository. Use this skill when asked to package a parser into a GitHub PR.asim-parser-filter-validatorValidates ASIM parser filtering parameters by running filter tests against a Log Analytics workspace. Pure PowerShell using az CLI for authentication — no Python or Azure SDK packages required. Use this skill after creating or modifying an ASIM parser to…asim-parser-creator-orchestratorOrchestrates the creation and validation of a new ASIM schema parser. Use this skill when asked to create a new ASIM parser.run-solution-analyzerRun the Solutions Analyzer scripts: mapper, documentation generator, ASIM browser. Use when: running solution analyzer, generating CSVs, generating docs, refreshing caches, force-refresh, invalidating caches, generating ASIM browser, running mapper, running…update-solution-analyzerMANDATORY guidelines for ANY edit to ANY file under Tools/Solutions Analyzer/ — including the mapper (map_solutions_connectors_tables.py), doc generator (generate_connector_docs.py), interactive docs (generate_interactive_docs.py), ASIM browser,…
avm-tf-azapiUse for AVM Terraform AzAPI resources, provider constraints, ARM schemas, parent IDs, resource types, retries, timeouts, response exports, replacement triggers, and ignore_body_changes.avm-tf-classificationsUse this skill whenever a contributor is deciding what KIND of Azure Verified Module to build in Terraform — resource module, pattern module, or utility module — or is naming a module / GitHub repo / Terraform Registry entry. Covers the three module classes,…avm-tf-codestyleUse for AVM Terraform file layout, HCL style, variables, outputs, validation, lifecycle syntax, provider requirements, and Avm.Authoring formatting.avm-tf-conftestUse whenever an AVM Terraform task involves Conftest, OPA, Rego, APRL, AVMSEC, policy findings, policy exceptions, or files under an example exceptions directory. Covers current policy identifiers, example-local exception placement, package names, and managed…avm-tf-interfacesUse for AVM Terraform diagnostic settings, role assignments, locks, managed identities, private endpoints, customer-managed keys, tags, and AzAPI control interfaces.avm-tf-migrationUse for AVM Terraform AzureRM-to-AzAPI migrations, state preservation, moved blocks, provider state moves, submodule extraction, upgrade tests, and post-migration specification compliance.avm-tf-processUse for the AVM Terraform contribution process from module proposal and repository setup through implementation, Avm.Authoring validation, pull request review, and release.avm-tf-submodulesUse for AVM Terraform ARM subresources implemented as local submodules, including cardinality, parent_id, resource_types, retry, timeouts, ignore_body_changes, outputs, files, and tests.
foundry-extension-scenario-authoring**WORKFLOW SKILL** — Authors and validates cli-interactive-tester scenarios for the azure.ai.agents extension: writes a new scenario YAML (or fixes an existing one) so it follows the tier/tag/hook/fixtures/requires conventions and goals-are-the-contract…foundry-extension-scenario-pr-regression**WORKFLOW SKILL** — Runs the azure.ai.agents extension's cli-interactive-tester scenarios locally as a PR-scoped regression check (Tier 0 is free/offline; Tier 1b/Tier 2 incur Azure cost). Resolves the current branch's PR, maps changed files to impacted…foundry-extension-scenario-suite-run**WORKFLOW SKILL** — Runs the azure.ai.agents extension's cli-interactive-tester scenarios as a full or tag/tier-filtered sweep NOT tied to a PR diff (Tier 0 free; Tier 1b/2 cost-gated). Discovers scenarios via list_scenarios, drives them concurrently via…changelog-generation**WORKFLOW SKILL** — Generates release changelog entries and bumps versions for azd core or azd extensions. Identifies merged PRs since the last release, fetches PR details via GitHub MCP, classifies changes, and writes user-facing changelog entries with…azd-grpc-contracts**WORKFLOW SKILL** - Inspects and evolves azd extension protobuf contracts across the stable v1 and preview v1beta channels. Reports the current channel state and delta, validates v1beta additions, implements beta-only services or focused overrides, and…azd-preflight**WORKFLOW SKILL** — Runs `go tool mage preflight` from `cli/azd/` and auto-fixes failures. Covers linting, formatting, copyright, spelling, build, and tests. Iterates fix-then-rerun cycles until all checks pass. INVOKES: go CLI, golangci-lint, cspell, gh…azd-code-reviewerReviews GitHub pull requests by applying multiple specialist lenses (security, Go expert, architect, testing, UX, docs, PM, Azure, novice customer), triaging findings for signal-to-noise, and returning structured inline comments. Use for: review PR, look at…azdUSE when the user is asking how to create or deploy apps to Azure. azd can handle Azure deployment, environment management, and lifecycle management. If the user's project has an azure.yaml, they're azd enabled, and should use this skill.
mesh-federationPair with a kars cluster and offload heavy tasks to governed cloud sandboxes with GPU / foundation-model inference / Azure AI services, or communicate with other agents over end-to-end encrypted AgentMesh. Triggers on natural-language intents like "offload to…agt-governanceBehavioral governance for OpenClaw agents via AGT — tool-level policy, inter-agent trust, audit logging.kars-spawnSpawn secure isolated sub-agent sandboxes, delegate tasks via AGT mesh, receive results, and destroy sub-agents. Uses the kars_spawn, kars_mesh_send, kars_mesh_inbox, and kars_spawn_destroy tools.foundry-agentsQuery and inspect Foundry prompt agents and invoke Foundry tools via the Responses API. OpenClaw is the orchestrator — Foundry provides managed AI services.foundry-codePython code execution via Azure AI Foundry Responses API with code_interpreter tool. Data analysis, charts, and math in a managed sandbox.foundry-conversationsManage persistent conversations via Foundry Conversations API. Create conversations, add messages, and maintain history across sessions.foundry-deploymentsQuery model deployments, connections, and indexes in the Foundry project. Discover available models and infrastructure.foundry-evaluationsEvaluate agent quality using Foundry OpenAI Evals API. Create evaluations, run them against models, and analyze results.
release-managementGuide maintainers and contributors through branching, versioning, changelog updates, and publishing agentops-accelerator. Trigger when users ask about branching strategy, creating a release, version tagging, publishing to PyPI, updating the changelog, cutting…agentops-agentAgentOps Doctor - surface release-readiness findings, regressions, latency spikes, error rates, and safety hits across AgentOps eval history, Azure Monitor traces, and Foundry control plane.speckit-checklistGenerate a custom checklist for the current feature based on user requirements.speckit-implementExecute the implementation plan by processing and executing all tasks defined in tasks.mdspeckit-taskstoissuesConvert existing tasks into actionable, dependency-ordered GitHub issues for the feature based on available design artifacts.agentops-workflowSet up AgentOps release-readiness workflows: PR eval gates, Doctor/evidence artifacts, and safe deploy handoffs to azd or Foundry prompt-agent tooling. Trigger on CI, CD, pipeline, workflow, GitHub Actions, Azure DevOps, ADO, PR gate, deploy, environments,…agentops-governanceScaffold ASSERT and Red Team runners for the release gate, and draft reviewable governance evidence for ASSERT, Agent Control Specification (ACS), Guided Guardrail readiness, and red-team planning. Trigger on "ASSERT", "ACS", "agent control", "guardrail",…agentops-evalRun AgentOps release-readiness evaluations against Foundry prompt agents, Foundry hosted endpoints, HTTP/JSON agents, or raw model deployments. Trigger on phrases like "run eval", "evaluate my agent", "benchmark", "agentops eval", "compare runs", "can we…
avm-tf-azapiUse for AVM Terraform AzAPI resources, provider constraints, ARM schemas, parent IDs, resource types, retries, timeouts, response exports, replacement triggers, and ignore_body_changes.avm-tf-classificationsUse this skill whenever a contributor is deciding what KIND of Azure Verified Module to build in Terraform — resource module, pattern module, or utility module — or is naming a module / GitHub repo / Terraform Registry entry. Covers the three module classes,…avm-tf-codestyleUse for AVM Terraform file layout, HCL style, variables, outputs, validation, lifecycle syntax, provider requirements, and Avm.Authoring formatting.avm-tf-documentationUse for AVM Terraform generated README content, _header.md, _footer.md, examples documentation, terraform-docs inputs, and Avm.Authoring documentation checks.avm-tf-interfacesUse for AVM Terraform diagnostic settings, role assignments, locks, managed identities, private endpoints, customer-managed keys, tags, and AzAPI control interfaces.avm-tf-lifecycleUse this skill whenever an Azure Verified Module (AVM) is being proposed, approved, published, handed over to a new owner, orphaned, or deprecated — and whenever a contributor is choosing a version number for a Terraform AVM module release. Covers the four…avm-tf-migrationUse for AVM Terraform AzureRM-to-AzAPI migrations, state preservation, moved blocks, provider state moves, submodule extraction, upgrade tests, and post-migration specification compliance.avm-tf-processUse for the AVM Terraform contribution process from module proposal and repository setup through implementation, Avm.Authoring validation, pull request review, and release.
acn-go-version-bumpGo version upgrade procedure for Azure Container Networking. Use when upgrading Go minor/patch versions, bumping MS Go toolchain, fixing FIPS/systemcrypto configuration, updating Dockerfile templates, or responding to Go CVE patches. Covers the 3-tier…acn-go-context-lifecycleGo context propagation, goroutine lifecycle, and process shutdown discipline. Use when writing or reviewing code that spawns goroutines, manages process lifecycle, passes context through call chains, or handles graceful shutdown. Trigger on…acn-go-control-plane-contractsGo control-plane contract design for Azure/azure-container-networking. Use when changing CRD Go types, status/condition fields, response-code mapping, controller/reconciler bootstrap logic, or generated contract artifacts such as CRD manifests and rendered…acn-go-design-boundariesGo code design boundaries — behavioral configuration vs scenario coupling, side effects in functions, function parameter minimality, abstraction timing, control-loop hysteresis, validator purity, and preflight-before-mutation. Use when designing config-driven…acn-go-errors-loggingGo error string formatting, zap logging discipline, and adjacent observability naming for production services. Use when writing error messages, choosing log levels, shaping zap messages and fields, deciding between log-and-return or single-handling, or…acn-go-http-api-contractsHTTP and REST contract design for Azure/azure-container-networking. Use when designing or reviewing HTTP handlers, routes, request/response types, query parameters, and action semantics. Trigger on GET handlers with bodies, PUT vs PATCH questions,…acn-go-interfaces-dependenciesGo interface design, dependency direction, and package coupling patterns. Use when defining interfaces, choosing where to place them, designing constructors, injecting dependencies, or reviewing import graphs. Trigger on exported interfaces in provider…acn-go-platform-abstractionGo platform/OS-specific code patterns for cross-platform projects. Use when writing or reviewing code that must work on multiple OSes (Linux, Windows), when you see noop stubs in _<os>.go files, runtime.GOOS checks, or OS-specific build tags. Supersedes…
azv-azure-to-bicepReverse-engineer a live Azure scope (resource group or filtered subscription) into deployment-ready, modular Bicep templates with parameter files. Use when the user wants to bring existing Azure infrastructure under Bicep/IaC management.azv-azure-to-diagramReverse-engineer a live Azure scope (resource group or filtered subscription) into a professional Draw.io architecture diagram following established AzVerify conventions. Use when the user wants to visualize or document existing Azure infrastructure as a…azv-bicep-policy-checkCheck a Bicep template against the Azure Policy assignments in the target Azure environment to determine whether the resources would be compliant before deployment. Uses the checkPolicyRestrictions REST API for fast server-side evaluation, with a legacy CLI…azv-bicep-whatifCompare Bicep templates against a live Azure environment by querying Azure directly and parsing the Bicep template. Presents categorized change results (Create, Modify, Delete, No Change) without deploying anything. Does NOT use ARM what-if.azv-diagram-azure-sync-deepDeep-compare a Draw.io Azure architecture diagram against a live Azure environment — checks both resource existence AND every tracked configuration property (SKU, size, settings, etc.) against expected values. Reports existence drift and property-level drift…azv-diagram-azure-syncCompare a Draw.io Azure architecture diagram against a live Azure environment to detect drift. Supports quick mode (existence check) and deep mode (full property-level comparison). Reports differences and offers resolution — update the diagram, update Azure,…azv-diagram-to-bicepGenerate deployment-ready Bicep templates and PowerShell scripts from an approved Draw.io Azure architecture diagram. Parses the diagram, generates a user-editable .bicepparam file with descriptive comments, validates against Azure constraints, and outputs…azv-bicep-diagram-syncCompare Bicep templates against a Draw.io Azure architecture diagram to detect resource-level divergence. Reports differences and offers resolution — update Bicep to match the diagram, update the diagram to match Bicep, or selectively resolve per resource.
federalavd-windows-policy-validationCreate, modify, review, and validate Windows policy settings in FederalAVD scripts and artifacts. Use when changing Optimize-AVDImage.ps1, Registry.pol writes, policy registry values, Windows services or scheduled tasks used as policy controls, ADMX-backed…federalavd-artifact-authoringCreate, update, and validate FederalAVD image artifacts and software download definitions. Use when adding customer-example artifacts, editing downloads.json, packaging installers, documenting download sources, or preparing artifacts for connected or…federalavd-deployment-dependency-reviewValidate FederalAVD deployment sequencing and output-to-input dependencies across Networking, AVD Shared Services, Image Management, Image Build, Host Pool, and add-ons. Use when planning deployment order, wiring deployment outputs into parameter files,…federalavd-bicep-maintenanceModify and validate FederalAVD Bicep templates, generated ARM JSON, and deployment parameters. Use when changing Azure resources, module contracts, parameters or outputs, synchronizing Bicep with ARM JSON, publishing Template Specs, or diagnosing Bicep…federalavd-policy-authoringCreate, modify, review, and validate FederalAVD session-host Azure Policy definitions, initiatives, assignments, remediation templates, and policy RBAC. Use when changing Modify or DeployIfNotExists policies, nested deployment templates, policy sets, policy…federalavd-ui-form-maintenanceCreate, modify, review, and validate FederalAVD uiFormDefinition.json files and Azure Portal Form View behavior. Use when changing form elements, visibility, constraints, EditableGrid columns, defaults, expressions, API controls, or output-to-Bicep parameter…avd-alert-kql-validationCreate and review KQL for the FederalAVD AVD Alerts add-on. Use when adding or changing scheduled query alerts, comparing alert logic with Microsoft AVD Insights workbooks, investigating query failures, or documenting intentional workbook deviations.federalavd-air-gapped-readinessReview FederalAVD deployments and image artifacts for Azure Government Secret or Top Secret air-gapped readiness. Use when auditing downloads.json, finding public network dependencies, preparing transfer inventories, validating pre-staged files, or checking…
add-featureUse when adding a medium or larger feature (or a non-trivial change) to the azure-functions-agents-runtime repository — i.e. anything that introduces new public surface, spans multiple modules, or changes authoring/discovery/registration behavior. Drives the…data-driven-workflowsGrammar for for_each over an upstream runtime array and per-item when. Irrelevant to fixed task lists, parallel branches, waits, or ordinary DAGs.update-schema-docsDetect schema.py changes and update front-matter-spec.md, architecture.md, and the public docs site (docs/index.md, docs/getting-started.md) with examples and documentation. Use when schema.py has been modified as part of a feature to ensure documentation…actionable-pr-reportOrganizes pull-request summaries into a prioritized team action report.pr-status-analysisDefines how to assess pull-request activity, checks, reviews, and merge readiness.glossaryShort glossary of domain terms used by the team.style-guideWriting style rules that some agents intentionally exclude.api-guideReference material for the Widget API, with details loaded on demand.