nerf-az-storage

name	nerf-az-storage
description	Azure Storage Account inspection tools (network rules, public access, private endpoints)
targets	["*"]

nerf-az-storage

These tools are available as scripts within this plugin. Call them using the absolute paths shown in each usage line.

Tools for inspecting storage account configuration. az-storage-account-show reports network rules, allowBlobPublicAccess, and private endpoint connections. Useful for auditing tfstate accounts and verifying public access is appropriately restricted. All tools accept --subscription to target a specific subscription.

nerf-az-storage-account-list

List storage accounts (optionally filtered by resource group).

Usage: ${CLAUDE_PLUGIN_ROOT}/skills/nerf-az-storage/scripts/nerf-az-storage-account-list [--resource-group|-g <resource_group>] [--subscription <subscription>] Maps to: az storage account list <resource_group> <subscription> --output json

Options:

• --resource-group|-g (optional): Filter to a specific resource group
• --subscription (optional): Subscription name or ID (defaults to active)

---

nerf-az-storage-account-show

Show storage account details (network rules, public access, private endpoints).

Usage: ${CLAUDE_PLUGIN_ROOT}/skills/nerf-az-storage/scripts/nerf-az-storage-account-show --resource-group|-g <resource_group> [--subscription <subscription>] <name> Maps to: az storage account show --resource-group <resource_group> --name <name> <subscription> --output json

Options:

• --resource-group|-g (required): Resource group containing the storage account
• --subscription (optional): Subscription name or ID (defaults to active)

Arguments:

• <name> (required): Storage account name

---

nerf-az-storage-account-network-rule-list

List explicit network rules on a storage account.

Usage: ${CLAUDE_PLUGIN_ROOT}/skills/nerf-az-storage/scripts/nerf-az-storage-account-network-rule-list --resource-group|-g <resource_group> [--subscription <subscription>] <account_name> Maps to: az storage account network-rule list --resource-group <resource_group> --account-name <account_name> <subscription> --output json

Options:

• --resource-group|-g (required): Resource group containing the storage account
• --subscription (optional): Subscription name or ID (defaults to active)

Arguments:

• <account_name> (required): Storage account name

---

Hit a bug, complaint, bypass-worthy guardrail, or want a feature? Use the nerf-report skill.