Install once. Give agents an Azure-native path from idea to cloud.

Plans Azure hosting, infrastructure, identity, and app configuration before deployment.

Prepare Azure apps for deployment (infra Bicep/Terraform, azure.yaml, Dockerfiles). Use for create/modernize or create+deploy; not cross-cloud migration (use azure-cloud-migrate).

Checks Azure infrastructure and app configuration before changes are deployed.

Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisite...

Deploys applications and infrastructure with recovery steps for common Azure failures.

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new...

Guides Azure app upgrades while preserving deployment and operations guardrails.

Assess and upgrade Azure workloads between plans, tiers, or SKUs, or modernize Azure SDK dependencies in source code.

Creates enterprise-ready infrastructure plans across networking, identity, governance, and operations.

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and mu...

Chooses the right Azure compute service for application shape, scale, and operations needs.

Azure VM and VMSS router for recommendations, pricing, autoscale, orchestration, connectivity troubleshooting, capacity reservations, and Essential Machine Management.

Guides AKS architecture, deployment, operations, and troubleshooting workflows.

Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server...

Sets up AI Runway patterns on AKS for platform teams and application developers.

Set up AI Runway on AKS — from bare cluster to running model. Covers cluster verification, controller install, GPU assessment, provider setup, and first deployment.

Reviews architecture and operations choices against Azure reliability practices.

Assess and improve the reliability posture of PaaS Applications (Azure Functions and Azure App Service). Scans deployed resources for zone redundancy, ZRS storage, health probes, and mult...

Plans and executes application migration paths into Azure with service-fit guidance.

Assess and migrate cross-cloud workloads to Azure with reports and code conversion. Supports Lambda→Functions, Beanstalk/Heroku/App Engine→App Service, Fargate/Kubernetes/Cloud Run/Spring...

Finds cost drivers and recommends Azure sizing, pricing, and cleanup improvements.

Unified Azure cost management: query historical costs, forecast future spending, and optimize to reduce waste.

Helps align Azure resources and deployments with compliance and security expectations.

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture c...

Selects least-privilege Azure roles for identities, apps, services, and operators.

Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. Also provides guidance on permissions requi...

Creates and configures Entra app registrations for secure Azure integrations.

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

Configures Entra identity patterns for agents and service integrations.

Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cro...

Uses Azure signals and tools to diagnose failing applications and infrastructure.

Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe triage.

Adds Application Insights instrumentation and telemetry patterns to applications.

Guidance for instrumenting webapps with Azure Application Insights. Provides telemetry patterns, SDK setup, and configuration references.

Finds and explains Azure resources, groups, subscriptions, and relationships.

List, find, and show Azure resources across subscriptions or resource groups. Handles prompts like "list the websites in my subscription", "list my web apps", "show my app services", "lis...

Creates diagrams and summaries from Azure resource relationships.

Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the relationships between individual resources.

Checks quota and capacity constraints before provisioning or scaling Azure resources.

Check/manage Azure quotas and usage across providers. For deployment planning, capacity validation, region selection.

Guides Azure AI Search, Speech, OpenAI, Document Intelligence, and related SDK choices.

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR.

Deploys, evaluates, monitors, and optimizes Foundry models and agents.

Deploy, evaluate, fine-tune, and manage Foundry agents end-to-end: Docker build, ACR push, hosted/prompt agent create, container start, batch eval, continuous eval, prompt optimizer, Agen...

Designs AI gateway patterns for model access, routing, safety, and observability.

Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents.

Guides Azure Storage account, blob, queue, and data access patterns.

Azure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake. Answers questions about storage access tiers (hot, cool, cold, archive), when to u...

Works with Azure Data Explorer and Kusto queries for operational and analytical scenarios.

Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetry, and time series analysis.

Chooses and configures Azure messaging services for events, queues, and integration flows.

Troubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configurati...

Prepares and deploys hosted Copilot SDK applications with Azure services.

Build, deploy, and modify GitHub Copilot SDK apps on Azure. MANDATORY when codebase contains @github/copilot-sdk or CopilotClient in package.json. PREFER OVER azure-prepare when copilot-s...