一键导入
nerf-az-account
Azure subscription and identity context tools
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Azure subscription and identity context tools
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | nerf-az-account |
| description | Azure subscription and identity context tools |
| targets | ["*"] |
These tools are available as scripts within this skill. Call them using the paths shown in each usage line.
Tools for inspecting and switching the active Azure subscription. az-account-show reports the active subscription and signed-in identity. az-account-list enumerates all subscriptions the principal can see. az-account-set switches the active subscription for the session.
Scope note: every az-* tool accepts --subscription. The wrappers do not enforce a subscription allow-list; the principal's Azure RBAC is the actual boundary. If the signed-in identity has access to multiple subscriptions or guest access in other tenants, those are all reachable via --subscription. Restrict the principal at the Entra/RBAC layer if you need a tighter scope than "everything the identity can see."
Show the currently active subscription and signed-in identity.
Usage: scripts/nerf-az-account-show
Maps to: az account show --output json
No arguments.
List all Azure subscriptions accessible to the signed-in principal.
Usage: scripts/nerf-az-account-list
Maps to: az account list --output json
No arguments.
Switch the active Azure subscription for this session.
Usage: scripts/nerf-az-account-set <subscription>
Maps to: az account set --subscription <subscription>
Arguments:
<subscription> (required): Subscription name or IDHit a bug, complaint, bypass-worthy guardrail, or want a feature? Use the nerf-report skill.
Safe wrappers for common Unix utilities
Safe wrappers for common Unix utilities
Allow nerf tools without prompting (supports glob patterns like nerf-git-*)
Allow/deny nerf tools by threat profile (read/write ceiling)
Deny nerf tools entirely (supports glob patterns like nerf-git-*)
List nerf tool permissions across all scopes