microsoft▌

Azure compliance scanning, Key Vault expiration auditing, and resource configuration validation against best practices. \n \n Runs azqr (Azure Quick Review) for comprehensive compliance assessment across subscriptions and resource groups \n Monitors Key Vault keys, secrets, and certificates for expiration dates and identifies items without expiration policies \n Detects orphaned resources, misconfigured settings, and security posture issues through Resource Graph queries \n Classifies findings b

Diagnose and resolve Azure Event Hubs and Service Bus SDK issues across languages. \n \n Covers connection failures, authentication errors, AMQP link issues, message lock timeouts, and event processor stalls across Python, Java, JavaScript, and .NET SDKs \n Includes language-specific troubleshooting guides, configuration best practices (retry, prefetch, batch size), and checkpoint/dead-letter diagnostics \n Integrates with Azure Monitor for KQL log queries, resource health checks, and Microsoft

Guidance and reference material for instrumenting webapps with Azure Application Insights. \n \n Covers SDK setup, telemetry patterns, and configuration for ASP.NET Core, Node.js, and Python applications hosted in Azure \n Distinguishes between this skill (reference and guidance) and azure-prepare (which orchestrates actual instrumentation changes) \n Recommends auto-instrumentation for C# ASP.NET Core apps on Azure App Service; provides manual instrumentation paths for other stacks \n Includes

Find minimal Azure RBAC roles, generate assignment commands, and provide Bicep infrastructure code. \n \n Identifies built-in roles matching desired permissions using Azure documentation, or generates custom role definitions when no built-in role fits \n Produces Azure CLI commands and Bicep code snippets for role assignments to identities, managed identities, and service principals \n Documents prerequisites for granting roles, including required permissions and recommended least-privilege role

Prepare Azure applications for deployment with infrastructure-as-code, configuration, and containerization. \n \n Generates Bicep or Terraform infrastructure code, azure.yaml configuration, and Dockerfiles based on application type and requirements \n Follows mandatory plan-first workflow: analyze workspace, gather requirements, select deployment recipe (AZD, AZCLI, Bicep, or Terraform), design architecture, and get user approval before code generation \n Supports creation, modernization, and up

Use this skill when:

Version: 0.1.0-preview | Last Updated: 2025-11-15 | Framework Version: 0.1.0-preview Languages: Python 3.10+, C# (.NET 8.0+) | License: MIT

Automate Microsoft Teams communication and collaboration workflows.

Use this skill when working with applications, agents, workflows, or migrations built on Microsoft Agent Framework.

Recommend Azure VM sizes, scale sets, and configurations based on workload type, performance needs, and budget. \n \n Analyzes workload requirements (web, database, ML, batch, HPC) and recommends appropriate VM families, sizes, and instance counts without requiring an Azure subscription \n Supports both single VMs and VM Scale Sets (VMSS) with guidance on autoscaling, load balancing, and orchestration modes (Flexible vs Uniform) \n Queries the unauthenticated Azure Retail Prices API to provide c