[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-azure-aifoundryposturecheck":3,"mdc--y024w6-key":39,"related-org-azure-aifoundryposturecheck":1128,"related-repo-azure-aifoundryposturecheck":1310},{"slug":4,"name":5,"fn":6,"description":7,"org":8,"tags":13,"stars":28,"repoUrl":29,"updatedAt":30,"license":31,"forks":32,"topics":33,"repo":34,"sourceUrl":37,"mdContent":38},"aifoundryposturecheck","ai_foundry_posture_check","assess Azure AI Foundry deployment posture","Assess security, reliability, and cost posture of Azure OpenAI and AI Foundry deployments. Detects anti-patterns like API keys instead of Managed Identity, public endpoints, disabled content filtering, deprecated models, over-provisioned PTU, missing AI Gateway, and single-region deployment.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},"azure","Azure (Microsoft)","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fazure.png","Azure",[14,18,19,22,25],{"name":15,"slug":16,"type":17},"Security","security","tag",{"name":12,"slug":9,"type":17},{"name":20,"slug":21,"type":17},"Reliability","reliability",{"name":23,"slug":24,"type":17},"Cost Optimization","cost-optimization",{"name":26,"slug":27,"type":17},"AI","ai",2,"https:\u002F\u002Fgithub.com\u002FAzure\u002Fsre-agent-plugins","2026-08-23T04:00:38.426809",null,8,[],{"repoUrl":29,"stars":28,"forks":32,"topics":35,"description":36},[],"Azure SRE Agent Plugins","https:\u002F\u002Fgithub.com\u002FAzure\u002Fsre-agent-plugins\u002Ftree\u002FHEAD\u002Fplugins\u002Fazure-proactive-operations\u002Fskills\u002Fai_foundry_posture_check","---\nname: ai_foundry_posture_check\ndescription: Assess security, reliability, and cost posture of Azure OpenAI and AI Foundry deployments. Detects anti-patterns like API keys instead of Managed Identity, public endpoints, disabled content filtering, deprecated models, over-provisioned PTU, missing AI Gateway, and single-region deployment.\n---\n\n# AI Foundry & OpenAI Posture Check\n\n## Purpose\n\nAssess the security, reliability, and cost efficiency of Azure OpenAI and AI Foundry deployments. Detects the most common anti-patterns that teams make when building AI-powered products.\n\n## Procedure\n\n### Step 0: Discover AI resources\n\n```bash\naz cognitiveservices account list \\\n  --query \"[?kind=='OpenAI' || kind=='AIServices'].{name:name, kind:kind, rg:resourceGroup, location:location}\" -o table\n```\n\n### Category 1: Security\n\n1. **Managed Identity** (12 pts): Check identity type and `disableLocalAuth`\n   ```bash\n   az cognitiveservices account show --name \u003Caccount> --resource-group \u003Crg> \\\n     --query \"{identity:identity.type, disableLocalAuth:properties.disableLocalAuth}\" -o json\n   ```\n2. **Network isolation** (13 pts): Check public access, firewall rules, private endpoints\n3. **Content filtering** (10 pts): Verify RAI policies assigned to all deployments\n   ```bash\n   az cognitiveservices account deployment list --name \u003Caccount> --resource-group \u003Crg> \\\n     --query \"[].{name:name, model:properties.model.name, raiPolicy:properties.raiPolicyName}\" -o table\n   ```\n\n### Category 2: Reliability & Operations\n\n1. **Model versions** (7 pts): Check all deployments are on GA versions, not deprecated\n   ```bash\n   az cognitiveservices account deployment list --name \u003Caccount> --resource-group \u003Crg> \\\n     --query \"[].{name:name, model:properties.model.name, version:properties.model.version}\" -o table\n   ```\n2. **Diagnostic settings** (7 pts): Verify RequestResponse + Audit logs to Log Analytics\n3. **Resource locks** (5 pts): Check CanNotDelete lock on production accounts\n4. **Multi-region** (5 pts): Verify accounts in 2+ regions for resilience\n5. **429 throttling** (6 pts): Query Log Analytics for throttle rate in last 24h\n   ```kusto\n   AzureDiagnostics\n   | where TimeGenerated > ago(24h) and ResourceProvider == \"MICROSOFT.COGNITIVESERVICES\"\n   | summarize TotalRequests=count(), Throttled=countif(resultSignature_d == 429) by Resource\n   ```\n\n### Category 3: Cost & Efficiency\n\n1. **Rate limits** (5 pts): Check deployments have explicit TPM capacity set\n2. **Model diversity** (3 pts): Verify mix of models (not premium for everything)\n3. **PTU utilization** (5 pts): If PTU exists, check utilization > 60%\n4. **Token consumption trend** (5 pts): Query token usage over 7 days for anomalies\n\n### Category 4: Architecture\n\n1. **AI Gateway (APIM)** (7 pts): Check for API Management with OpenAI backend\n   ```bash\n   az apim list --query \"[].{name:name, sku:sku.name}\" -o table\n   ```\n2. **Environment separation** (5 pts): Verify dev\u002Fprod use separate OpenAI accounts\n\n## Scoring\n\n| Score | Level |\n|-------|-------|\n| 0-39 | 🔴 Critical |\n| 40-69 | 🟡 Needs work |\n| 70-89 | 🟢 Good |\n| 90-100 | 🏆 Excellent |\n\n## Sample output\n\n| Field | Value |\n|-------|-------|\n| Score | 58 \u002F 100 |\n| Level | 🟡 Needs work |\n| Accounts assessed | 2 (oai-prod-eastus, oai-dev-eastus) |\n\n| Category | Score | Max |\n|----------|-------|-----|\n| Security | 19 | 35 |\n| Reliability | 18 | 30 |\n| Cost & Efficiency | 13 | 18 |\n| Architecture | 8 | 12 |\n\n| # | Critical finding | Impact |\n|---|-----------------|--------|\n| 1 | API keys enabled on oai-prod-eastus | 🔴 Key leak = full access |\n| 2 | Public endpoint, no firewall | 🔴 Internet-exposed |\n| 3 | Single region deployment | 🟡 No failover |\n\n## References\n\n- Azure OpenAI Security: https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fopenai\u002Fhow-to\u002Fmanaged-identity\n- Content Filtering: https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fopenai\u002Fhow-to\u002Fcontent-filters\n- Model Retirements: https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fopenai\u002Fconcepts\u002Fmodel-retirements\n- BCDR: https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fopenai\u002Fhow-to\u002Fbusiness-continuity-disaster-recovery\n",{"data":40,"body":41},{"name":5,"description":7},{"type":42,"children":43},"root",[44,53,60,66,72,79,159,165,418,424,613,619,662,668,740,746,826,832,890,985,1066,1072,1122],{"type":45,"tag":46,"props":47,"children":49},"element","h1",{"id":48},"ai-foundry-openai-posture-check",[50],{"type":51,"value":52},"text","AI Foundry & OpenAI Posture Check",{"type":45,"tag":54,"props":55,"children":57},"h2",{"id":56},"purpose",[58],{"type":51,"value":59},"Purpose",{"type":45,"tag":61,"props":62,"children":63},"p",{},[64],{"type":51,"value":65},"Assess the security, reliability, and cost efficiency of Azure OpenAI and AI Foundry deployments. Detects the most common anti-patterns that teams make when building AI-powered products.",{"type":45,"tag":54,"props":67,"children":69},{"id":68},"procedure",[70],{"type":51,"value":71},"Procedure",{"type":45,"tag":73,"props":74,"children":76},"h3",{"id":75},"step-0-discover-ai-resources",[77],{"type":51,"value":78},"Step 0: Discover AI resources",{"type":45,"tag":80,"props":81,"children":86},"pre",{"className":82,"code":83,"language":84,"meta":85,"style":85},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","az cognitiveservices account list \\\n  --query \"[?kind=='OpenAI' || kind=='AIServices'].{name:name, kind:kind, rg:resourceGroup, location:location}\" -o table\n","bash","",[87],{"type":45,"tag":88,"props":89,"children":90},"code",{"__ignoreMap":85},[91,125],{"type":45,"tag":92,"props":93,"children":96},"span",{"class":94,"line":95},"line",1,[97,103,109,114,119],{"type":45,"tag":92,"props":98,"children":100},{"style":99},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[101],{"type":51,"value":102},"az",{"type":45,"tag":92,"props":104,"children":106},{"style":105},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[107],{"type":51,"value":108}," cognitiveservices",{"type":45,"tag":92,"props":110,"children":111},{"style":105},[112],{"type":51,"value":113}," account",{"type":45,"tag":92,"props":115,"children":116},{"style":105},[117],{"type":51,"value":118}," list",{"type":45,"tag":92,"props":120,"children":122},{"style":121},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[123],{"type":51,"value":124}," \\\n",{"type":45,"tag":92,"props":126,"children":127},{"class":94,"line":28},[128,133,139,144,149,154],{"type":45,"tag":92,"props":129,"children":130},{"style":105},[131],{"type":51,"value":132},"  --query",{"type":45,"tag":92,"props":134,"children":136},{"style":135},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[137],{"type":51,"value":138}," \"",{"type":45,"tag":92,"props":140,"children":141},{"style":105},[142],{"type":51,"value":143},"[?kind=='OpenAI' || kind=='AIServices'].{name:name, kind:kind, rg:resourceGroup, location:location}",{"type":45,"tag":92,"props":145,"children":146},{"style":135},[147],{"type":51,"value":148},"\"",{"type":45,"tag":92,"props":150,"children":151},{"style":105},[152],{"type":51,"value":153}," -o",{"type":45,"tag":92,"props":155,"children":156},{"style":105},[157],{"type":51,"value":158}," table\n",{"type":45,"tag":73,"props":160,"children":162},{"id":161},"category-1-security",[163],{"type":51,"value":164},"Category 1: Security",{"type":45,"tag":166,"props":167,"children":168},"ol",{},[169,295,305],{"type":45,"tag":170,"props":171,"children":172},"li",{},[173,179,181,187],{"type":45,"tag":174,"props":175,"children":176},"strong",{},[177],{"type":51,"value":178},"Managed Identity",{"type":51,"value":180}," (12 pts): Check identity type and ",{"type":45,"tag":88,"props":182,"children":184},{"className":183},[],[185],{"type":51,"value":186},"disableLocalAuth",{"type":45,"tag":80,"props":188,"children":190},{"className":82,"code":189,"language":84,"meta":85,"style":85},"az cognitiveservices account show --name \u003Caccount> --resource-group \u003Crg> \\\n  --query \"{identity:identity.type, disableLocalAuth:properties.disableLocalAuth}\" -o json\n",[191],{"type":45,"tag":88,"props":192,"children":193},{"__ignoreMap":85},[194,266],{"type":45,"tag":92,"props":195,"children":196},{"class":94,"line":95},[197,201,205,209,214,219,224,229,234,239,244,248,253,258,262],{"type":45,"tag":92,"props":198,"children":199},{"style":99},[200],{"type":51,"value":102},{"type":45,"tag":92,"props":202,"children":203},{"style":105},[204],{"type":51,"value":108},{"type":45,"tag":92,"props":206,"children":207},{"style":105},[208],{"type":51,"value":113},{"type":45,"tag":92,"props":210,"children":211},{"style":105},[212],{"type":51,"value":213}," show",{"type":45,"tag":92,"props":215,"children":216},{"style":105},[217],{"type":51,"value":218}," --name",{"type":45,"tag":92,"props":220,"children":221},{"style":135},[222],{"type":51,"value":223}," \u003C",{"type":45,"tag":92,"props":225,"children":226},{"style":105},[227],{"type":51,"value":228},"accoun",{"type":45,"tag":92,"props":230,"children":231},{"style":121},[232],{"type":51,"value":233},"t",{"type":45,"tag":92,"props":235,"children":236},{"style":135},[237],{"type":51,"value":238},">",{"type":45,"tag":92,"props":240,"children":241},{"style":105},[242],{"type":51,"value":243}," --resource-group",{"type":45,"tag":92,"props":245,"children":246},{"style":135},[247],{"type":51,"value":223},{"type":45,"tag":92,"props":249,"children":250},{"style":105},[251],{"type":51,"value":252},"r",{"type":45,"tag":92,"props":254,"children":255},{"style":121},[256],{"type":51,"value":257},"g",{"type":45,"tag":92,"props":259,"children":260},{"style":135},[261],{"type":51,"value":238},{"type":45,"tag":92,"props":263,"children":264},{"style":121},[265],{"type":51,"value":124},{"type":45,"tag":92,"props":267,"children":268},{"class":94,"line":28},[269,273,277,282,286,290],{"type":45,"tag":92,"props":270,"children":271},{"style":105},[272],{"type":51,"value":132},{"type":45,"tag":92,"props":274,"children":275},{"style":135},[276],{"type":51,"value":138},{"type":45,"tag":92,"props":278,"children":279},{"style":105},[280],{"type":51,"value":281},"{identity:identity.type, disableLocalAuth:properties.disableLocalAuth}",{"type":45,"tag":92,"props":283,"children":284},{"style":135},[285],{"type":51,"value":148},{"type":45,"tag":92,"props":287,"children":288},{"style":105},[289],{"type":51,"value":153},{"type":45,"tag":92,"props":291,"children":292},{"style":105},[293],{"type":51,"value":294}," json\n",{"type":45,"tag":170,"props":296,"children":297},{},[298,303],{"type":45,"tag":174,"props":299,"children":300},{},[301],{"type":51,"value":302},"Network isolation",{"type":51,"value":304}," (13 pts): Check public access, firewall rules, private endpoints",{"type":45,"tag":170,"props":306,"children":307},{},[308,313,315],{"type":45,"tag":174,"props":309,"children":310},{},[311],{"type":51,"value":312},"Content filtering",{"type":51,"value":314}," (10 pts): Verify RAI policies assigned to all deployments\n",{"type":45,"tag":80,"props":316,"children":318},{"className":82,"code":317,"language":84,"meta":85,"style":85},"az cognitiveservices account deployment list --name \u003Caccount> --resource-group \u003Crg> \\\n  --query \"[].{name:name, model:properties.model.name, raiPolicy:properties.raiPolicyName}\" -o table\n",[319],{"type":45,"tag":88,"props":320,"children":321},{"__ignoreMap":85},[322,390],{"type":45,"tag":92,"props":323,"children":324},{"class":94,"line":95},[325,329,333,337,342,346,350,354,358,362,366,370,374,378,382,386],{"type":45,"tag":92,"props":326,"children":327},{"style":99},[328],{"type":51,"value":102},{"type":45,"tag":92,"props":330,"children":331},{"style":105},[332],{"type":51,"value":108},{"type":45,"tag":92,"props":334,"children":335},{"style":105},[336],{"type":51,"value":113},{"type":45,"tag":92,"props":338,"children":339},{"style":105},[340],{"type":51,"value":341}," deployment",{"type":45,"tag":92,"props":343,"children":344},{"style":105},[345],{"type":51,"value":118},{"type":45,"tag":92,"props":347,"children":348},{"style":105},[349],{"type":51,"value":218},{"type":45,"tag":92,"props":351,"children":352},{"style":135},[353],{"type":51,"value":223},{"type":45,"tag":92,"props":355,"children":356},{"style":105},[357],{"type":51,"value":228},{"type":45,"tag":92,"props":359,"children":360},{"style":121},[361],{"type":51,"value":233},{"type":45,"tag":92,"props":363,"children":364},{"style":135},[365],{"type":51,"value":238},{"type":45,"tag":92,"props":367,"children":368},{"style":105},[369],{"type":51,"value":243},{"type":45,"tag":92,"props":371,"children":372},{"style":135},[373],{"type":51,"value":223},{"type":45,"tag":92,"props":375,"children":376},{"style":105},[377],{"type":51,"value":252},{"type":45,"tag":92,"props":379,"children":380},{"style":121},[381],{"type":51,"value":257},{"type":45,"tag":92,"props":383,"children":384},{"style":135},[385],{"type":51,"value":238},{"type":45,"tag":92,"props":387,"children":388},{"style":121},[389],{"type":51,"value":124},{"type":45,"tag":92,"props":391,"children":392},{"class":94,"line":28},[393,397,401,406,410,414],{"type":45,"tag":92,"props":394,"children":395},{"style":105},[396],{"type":51,"value":132},{"type":45,"tag":92,"props":398,"children":399},{"style":135},[400],{"type":51,"value":138},{"type":45,"tag":92,"props":402,"children":403},{"style":105},[404],{"type":51,"value":405},"[].{name:name, model:properties.model.name, raiPolicy:properties.raiPolicyName}",{"type":45,"tag":92,"props":407,"children":408},{"style":135},[409],{"type":51,"value":148},{"type":45,"tag":92,"props":411,"children":412},{"style":105},[413],{"type":51,"value":153},{"type":45,"tag":92,"props":415,"children":416},{"style":105},[417],{"type":51,"value":158},{"type":45,"tag":73,"props":419,"children":421},{"id":420},"category-2-reliability-operations",[422],{"type":51,"value":423},"Category 2: Reliability & Operations",{"type":45,"tag":166,"props":425,"children":426},{},[427,539,549,559,569],{"type":45,"tag":170,"props":428,"children":429},{},[430,435,437],{"type":45,"tag":174,"props":431,"children":432},{},[433],{"type":51,"value":434},"Model versions",{"type":51,"value":436}," (7 pts): Check all deployments are on GA versions, not deprecated\n",{"type":45,"tag":80,"props":438,"children":440},{"className":82,"code":439,"language":84,"meta":85,"style":85},"az cognitiveservices account deployment list --name \u003Caccount> --resource-group \u003Crg> \\\n  --query \"[].{name:name, model:properties.model.name, version:properties.model.version}\" -o table\n",[441],{"type":45,"tag":88,"props":442,"children":443},{"__ignoreMap":85},[444,511],{"type":45,"tag":92,"props":445,"children":446},{"class":94,"line":95},[447,451,455,459,463,467,471,475,479,483,487,491,495,499,503,507],{"type":45,"tag":92,"props":448,"children":449},{"style":99},[450],{"type":51,"value":102},{"type":45,"tag":92,"props":452,"children":453},{"style":105},[454],{"type":51,"value":108},{"type":45,"tag":92,"props":456,"children":457},{"style":105},[458],{"type":51,"value":113},{"type":45,"tag":92,"props":460,"children":461},{"style":105},[462],{"type":51,"value":341},{"type":45,"tag":92,"props":464,"children":465},{"style":105},[466],{"type":51,"value":118},{"type":45,"tag":92,"props":468,"children":469},{"style":105},[470],{"type":51,"value":218},{"type":45,"tag":92,"props":472,"children":473},{"style":135},[474],{"type":51,"value":223},{"type":45,"tag":92,"props":476,"children":477},{"style":105},[478],{"type":51,"value":228},{"type":45,"tag":92,"props":480,"children":481},{"style":121},[482],{"type":51,"value":233},{"type":45,"tag":92,"props":484,"children":485},{"style":135},[486],{"type":51,"value":238},{"type":45,"tag":92,"props":488,"children":489},{"style":105},[490],{"type":51,"value":243},{"type":45,"tag":92,"props":492,"children":493},{"style":135},[494],{"type":51,"value":223},{"type":45,"tag":92,"props":496,"children":497},{"style":105},[498],{"type":51,"value":252},{"type":45,"tag":92,"props":500,"children":501},{"style":121},[502],{"type":51,"value":257},{"type":45,"tag":92,"props":504,"children":505},{"style":135},[506],{"type":51,"value":238},{"type":45,"tag":92,"props":508,"children":509},{"style":121},[510],{"type":51,"value":124},{"type":45,"tag":92,"props":512,"children":513},{"class":94,"line":28},[514,518,522,527,531,535],{"type":45,"tag":92,"props":515,"children":516},{"style":105},[517],{"type":51,"value":132},{"type":45,"tag":92,"props":519,"children":520},{"style":135},[521],{"type":51,"value":138},{"type":45,"tag":92,"props":523,"children":524},{"style":105},[525],{"type":51,"value":526},"[].{name:name, model:properties.model.name, version:properties.model.version}",{"type":45,"tag":92,"props":528,"children":529},{"style":135},[530],{"type":51,"value":148},{"type":45,"tag":92,"props":532,"children":533},{"style":105},[534],{"type":51,"value":153},{"type":45,"tag":92,"props":536,"children":537},{"style":105},[538],{"type":51,"value":158},{"type":45,"tag":170,"props":540,"children":541},{},[542,547],{"type":45,"tag":174,"props":543,"children":544},{},[545],{"type":51,"value":546},"Diagnostic settings",{"type":51,"value":548}," (7 pts): Verify RequestResponse + Audit logs to Log Analytics",{"type":45,"tag":170,"props":550,"children":551},{},[552,557],{"type":45,"tag":174,"props":553,"children":554},{},[555],{"type":51,"value":556},"Resource locks",{"type":51,"value":558}," (5 pts): Check CanNotDelete lock on production accounts",{"type":45,"tag":170,"props":560,"children":561},{},[562,567],{"type":45,"tag":174,"props":563,"children":564},{},[565],{"type":51,"value":566},"Multi-region",{"type":51,"value":568}," (5 pts): Verify accounts in 2+ regions for resilience",{"type":45,"tag":170,"props":570,"children":571},{},[572,577,579],{"type":45,"tag":174,"props":573,"children":574},{},[575],{"type":51,"value":576},"429 throttling",{"type":51,"value":578}," (6 pts): Query Log Analytics for throttle rate in last 24h\n",{"type":45,"tag":80,"props":580,"children":584},{"className":581,"code":582,"language":583,"meta":85,"style":85},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","AzureDiagnostics\n| where TimeGenerated > ago(24h) and ResourceProvider == \"MICROSOFT.COGNITIVESERVICES\"\n| summarize TotalRequests=count(), Throttled=countif(resultSignature_d == 429) by Resource\n","kusto",[585],{"type":45,"tag":88,"props":586,"children":587},{"__ignoreMap":85},[588,596,604],{"type":45,"tag":92,"props":589,"children":590},{"class":94,"line":95},[591],{"type":45,"tag":92,"props":592,"children":593},{},[594],{"type":51,"value":595},"AzureDiagnostics\n",{"type":45,"tag":92,"props":597,"children":598},{"class":94,"line":28},[599],{"type":45,"tag":92,"props":600,"children":601},{},[602],{"type":51,"value":603},"| where TimeGenerated > ago(24h) and ResourceProvider == \"MICROSOFT.COGNITIVESERVICES\"\n",{"type":45,"tag":92,"props":605,"children":607},{"class":94,"line":606},3,[608],{"type":45,"tag":92,"props":609,"children":610},{},[611],{"type":51,"value":612},"| summarize TotalRequests=count(), Throttled=countif(resultSignature_d == 429) by Resource\n",{"type":45,"tag":73,"props":614,"children":616},{"id":615},"category-3-cost-efficiency",[617],{"type":51,"value":618},"Category 3: Cost & Efficiency",{"type":45,"tag":166,"props":620,"children":621},{},[622,632,642,652],{"type":45,"tag":170,"props":623,"children":624},{},[625,630],{"type":45,"tag":174,"props":626,"children":627},{},[628],{"type":51,"value":629},"Rate limits",{"type":51,"value":631}," (5 pts): Check deployments have explicit TPM capacity set",{"type":45,"tag":170,"props":633,"children":634},{},[635,640],{"type":45,"tag":174,"props":636,"children":637},{},[638],{"type":51,"value":639},"Model diversity",{"type":51,"value":641}," (3 pts): Verify mix of models (not premium for everything)",{"type":45,"tag":170,"props":643,"children":644},{},[645,650],{"type":45,"tag":174,"props":646,"children":647},{},[648],{"type":51,"value":649},"PTU utilization",{"type":51,"value":651}," (5 pts): If PTU exists, check utilization > 60%",{"type":45,"tag":170,"props":653,"children":654},{},[655,660],{"type":45,"tag":174,"props":656,"children":657},{},[658],{"type":51,"value":659},"Token consumption trend",{"type":51,"value":661}," (5 pts): Query token usage over 7 days for anomalies",{"type":45,"tag":73,"props":663,"children":665},{"id":664},"category-4-architecture",[666],{"type":51,"value":667},"Category 4: Architecture",{"type":45,"tag":166,"props":669,"children":670},{},[671,730],{"type":45,"tag":170,"props":672,"children":673},{},[674,679,681],{"type":45,"tag":174,"props":675,"children":676},{},[677],{"type":51,"value":678},"AI Gateway (APIM)",{"type":51,"value":680}," (7 pts): Check for API Management with OpenAI backend\n",{"type":45,"tag":80,"props":682,"children":684},{"className":82,"code":683,"language":84,"meta":85,"style":85},"az apim list --query \"[].{name:name, sku:sku.name}\" -o table\n",[685],{"type":45,"tag":88,"props":686,"children":687},{"__ignoreMap":85},[688],{"type":45,"tag":92,"props":689,"children":690},{"class":94,"line":95},[691,695,700,704,709,713,718,722,726],{"type":45,"tag":92,"props":692,"children":693},{"style":99},[694],{"type":51,"value":102},{"type":45,"tag":92,"props":696,"children":697},{"style":105},[698],{"type":51,"value":699}," apim",{"type":45,"tag":92,"props":701,"children":702},{"style":105},[703],{"type":51,"value":118},{"type":45,"tag":92,"props":705,"children":706},{"style":105},[707],{"type":51,"value":708}," --query",{"type":45,"tag":92,"props":710,"children":711},{"style":135},[712],{"type":51,"value":138},{"type":45,"tag":92,"props":714,"children":715},{"style":105},[716],{"type":51,"value":717},"[].{name:name, sku:sku.name}",{"type":45,"tag":92,"props":719,"children":720},{"style":135},[721],{"type":51,"value":148},{"type":45,"tag":92,"props":723,"children":724},{"style":105},[725],{"type":51,"value":153},{"type":45,"tag":92,"props":727,"children":728},{"style":105},[729],{"type":51,"value":158},{"type":45,"tag":170,"props":731,"children":732},{},[733,738],{"type":45,"tag":174,"props":734,"children":735},{},[736],{"type":51,"value":737},"Environment separation",{"type":51,"value":739}," (5 pts): Verify dev\u002Fprod use separate OpenAI accounts",{"type":45,"tag":54,"props":741,"children":743},{"id":742},"scoring",[744],{"type":51,"value":745},"Scoring",{"type":45,"tag":747,"props":748,"children":749},"table",{},[750,769],{"type":45,"tag":751,"props":752,"children":753},"thead",{},[754],{"type":45,"tag":755,"props":756,"children":757},"tr",{},[758,764],{"type":45,"tag":759,"props":760,"children":761},"th",{},[762],{"type":51,"value":763},"Score",{"type":45,"tag":759,"props":765,"children":766},{},[767],{"type":51,"value":768},"Level",{"type":45,"tag":770,"props":771,"children":772},"tbody",{},[773,787,800,813],{"type":45,"tag":755,"props":774,"children":775},{},[776,782],{"type":45,"tag":777,"props":778,"children":779},"td",{},[780],{"type":51,"value":781},"0-39",{"type":45,"tag":777,"props":783,"children":784},{},[785],{"type":51,"value":786},"🔴 Critical",{"type":45,"tag":755,"props":788,"children":789},{},[790,795],{"type":45,"tag":777,"props":791,"children":792},{},[793],{"type":51,"value":794},"40-69",{"type":45,"tag":777,"props":796,"children":797},{},[798],{"type":51,"value":799},"🟡 Needs work",{"type":45,"tag":755,"props":801,"children":802},{},[803,808],{"type":45,"tag":777,"props":804,"children":805},{},[806],{"type":51,"value":807},"70-89",{"type":45,"tag":777,"props":809,"children":810},{},[811],{"type":51,"value":812},"🟢 Good",{"type":45,"tag":755,"props":814,"children":815},{},[816,821],{"type":45,"tag":777,"props":817,"children":818},{},[819],{"type":51,"value":820},"90-100",{"type":45,"tag":777,"props":822,"children":823},{},[824],{"type":51,"value":825},"🏆 Excellent",{"type":45,"tag":54,"props":827,"children":829},{"id":828},"sample-output",[830],{"type":51,"value":831},"Sample output",{"type":45,"tag":747,"props":833,"children":834},{},[835,851],{"type":45,"tag":751,"props":836,"children":837},{},[838],{"type":45,"tag":755,"props":839,"children":840},{},[841,846],{"type":45,"tag":759,"props":842,"children":843},{},[844],{"type":51,"value":845},"Field",{"type":45,"tag":759,"props":847,"children":848},{},[849],{"type":51,"value":850},"Value",{"type":45,"tag":770,"props":852,"children":853},{},[854,866,877],{"type":45,"tag":755,"props":855,"children":856},{},[857,861],{"type":45,"tag":777,"props":858,"children":859},{},[860],{"type":51,"value":763},{"type":45,"tag":777,"props":862,"children":863},{},[864],{"type":51,"value":865},"58 \u002F 100",{"type":45,"tag":755,"props":867,"children":868},{},[869,873],{"type":45,"tag":777,"props":870,"children":871},{},[872],{"type":51,"value":768},{"type":45,"tag":777,"props":874,"children":875},{},[876],{"type":51,"value":799},{"type":45,"tag":755,"props":878,"children":879},{},[880,885],{"type":45,"tag":777,"props":881,"children":882},{},[883],{"type":51,"value":884},"Accounts assessed",{"type":45,"tag":777,"props":886,"children":887},{},[888],{"type":51,"value":889},"2 (oai-prod-eastus, oai-dev-eastus)",{"type":45,"tag":747,"props":891,"children":892},{},[893,913],{"type":45,"tag":751,"props":894,"children":895},{},[896],{"type":45,"tag":755,"props":897,"children":898},{},[899,904,908],{"type":45,"tag":759,"props":900,"children":901},{},[902],{"type":51,"value":903},"Category",{"type":45,"tag":759,"props":905,"children":906},{},[907],{"type":51,"value":763},{"type":45,"tag":759,"props":909,"children":910},{},[911],{"type":51,"value":912},"Max",{"type":45,"tag":770,"props":914,"children":915},{},[916,933,950,967],{"type":45,"tag":755,"props":917,"children":918},{},[919,923,928],{"type":45,"tag":777,"props":920,"children":921},{},[922],{"type":51,"value":15},{"type":45,"tag":777,"props":924,"children":925},{},[926],{"type":51,"value":927},"19",{"type":45,"tag":777,"props":929,"children":930},{},[931],{"type":51,"value":932},"35",{"type":45,"tag":755,"props":934,"children":935},{},[936,940,945],{"type":45,"tag":777,"props":937,"children":938},{},[939],{"type":51,"value":20},{"type":45,"tag":777,"props":941,"children":942},{},[943],{"type":51,"value":944},"18",{"type":45,"tag":777,"props":946,"children":947},{},[948],{"type":51,"value":949},"30",{"type":45,"tag":755,"props":951,"children":952},{},[953,958,963],{"type":45,"tag":777,"props":954,"children":955},{},[956],{"type":51,"value":957},"Cost & Efficiency",{"type":45,"tag":777,"props":959,"children":960},{},[961],{"type":51,"value":962},"13",{"type":45,"tag":777,"props":964,"children":965},{},[966],{"type":51,"value":944},{"type":45,"tag":755,"props":968,"children":969},{},[970,975,980],{"type":45,"tag":777,"props":971,"children":972},{},[973],{"type":51,"value":974},"Architecture",{"type":45,"tag":777,"props":976,"children":977},{},[978],{"type":51,"value":979},"8",{"type":45,"tag":777,"props":981,"children":982},{},[983],{"type":51,"value":984},"12",{"type":45,"tag":747,"props":986,"children":987},{},[988,1009],{"type":45,"tag":751,"props":989,"children":990},{},[991],{"type":45,"tag":755,"props":992,"children":993},{},[994,999,1004],{"type":45,"tag":759,"props":995,"children":996},{},[997],{"type":51,"value":998},"#",{"type":45,"tag":759,"props":1000,"children":1001},{},[1002],{"type":51,"value":1003},"Critical finding",{"type":45,"tag":759,"props":1005,"children":1006},{},[1007],{"type":51,"value":1008},"Impact",{"type":45,"tag":770,"props":1010,"children":1011},{},[1012,1030,1048],{"type":45,"tag":755,"props":1013,"children":1014},{},[1015,1020,1025],{"type":45,"tag":777,"props":1016,"children":1017},{},[1018],{"type":51,"value":1019},"1",{"type":45,"tag":777,"props":1021,"children":1022},{},[1023],{"type":51,"value":1024},"API keys enabled on oai-prod-eastus",{"type":45,"tag":777,"props":1026,"children":1027},{},[1028],{"type":51,"value":1029},"🔴 Key leak = full access",{"type":45,"tag":755,"props":1031,"children":1032},{},[1033,1038,1043],{"type":45,"tag":777,"props":1034,"children":1035},{},[1036],{"type":51,"value":1037},"2",{"type":45,"tag":777,"props":1039,"children":1040},{},[1041],{"type":51,"value":1042},"Public endpoint, no firewall",{"type":45,"tag":777,"props":1044,"children":1045},{},[1046],{"type":51,"value":1047},"🔴 Internet-exposed",{"type":45,"tag":755,"props":1049,"children":1050},{},[1051,1056,1061],{"type":45,"tag":777,"props":1052,"children":1053},{},[1054],{"type":51,"value":1055},"3",{"type":45,"tag":777,"props":1057,"children":1058},{},[1059],{"type":51,"value":1060},"Single region deployment",{"type":45,"tag":777,"props":1062,"children":1063},{},[1064],{"type":51,"value":1065},"🟡 No failover",{"type":45,"tag":54,"props":1067,"children":1069},{"id":1068},"references",[1070],{"type":51,"value":1071},"References",{"type":45,"tag":1073,"props":1074,"children":1075},"ul",{},[1076,1089,1100,1111],{"type":45,"tag":170,"props":1077,"children":1078},{},[1079,1081],{"type":51,"value":1080},"Azure OpenAI Security: ",{"type":45,"tag":1082,"props":1083,"children":1087},"a",{"href":1084,"rel":1085},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fopenai\u002Fhow-to\u002Fmanaged-identity",[1086],"nofollow",[1088],{"type":51,"value":1084},{"type":45,"tag":170,"props":1090,"children":1091},{},[1092,1094],{"type":51,"value":1093},"Content Filtering: ",{"type":45,"tag":1082,"props":1095,"children":1098},{"href":1096,"rel":1097},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fopenai\u002Fhow-to\u002Fcontent-filters",[1086],[1099],{"type":51,"value":1096},{"type":45,"tag":170,"props":1101,"children":1102},{},[1103,1105],{"type":51,"value":1104},"Model Retirements: ",{"type":45,"tag":1082,"props":1106,"children":1109},{"href":1107,"rel":1108},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fopenai\u002Fconcepts\u002Fmodel-retirements",[1086],[1110],{"type":51,"value":1107},{"type":45,"tag":170,"props":1112,"children":1113},{},[1114,1116],{"type":51,"value":1115},"BCDR: ",{"type":45,"tag":1082,"props":1117,"children":1120},{"href":1118,"rel":1119},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fopenai\u002Fhow-to\u002Fbusiness-continuity-disaster-recovery",[1086],[1121],{"type":51,"value":1118},{"type":45,"tag":1123,"props":1124,"children":1125},"style",{},[1126],{"type":51,"value":1127},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":1129,"total":1309},[1130,1149,1168,1187,1202,1217,1230,1245,1256,1270,1283,1295],{"slug":1131,"name":1131,"fn":1132,"description":1133,"org":1134,"tags":1135,"stars":1146,"repoUrl":1147,"updatedAt":1148},"azure-arg-external-evaluation-policy-author","author and test Azure Resource Graph policies","Use when the user wants to author, design, or test an Azure Policy that queries Azure Resource Graph (ARG) at request-time — i.e. a policy whose deny\u002Faudit decision depends on data from elsewhere in the subscription (sibling\u002Fparent resource state, RG-wide invariants, multi-hop relationships, etc.). Formally called Azure Policy External Evaluation; sometimes referred to colloquially as \"Invoke\". Drives an iterative KQL co-design loop against the user's real subscription via `az graph query`, then emits a policy definition, assignment, `.http` test flow, and an `EXPLANATION.md` companion. Read-only; never provisions anything.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1136,1137,1140,1143],{"name":12,"slug":9,"type":17},{"name":1138,"slug":1139,"type":17},"Compliance","compliance",{"name":1141,"slug":1142,"type":17},"Governance","governance",{"name":1144,"slug":1145,"type":17},"Policy","policy",1689,"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-policy","2026-07-12T08:17:48.378432",{"slug":1150,"name":1150,"fn":1151,"description":1152,"org":1153,"tags":1154,"stars":1165,"repoUrl":1166,"updatedAt":1167},"azure-blueprints-migration","migrate Azure Blueprints to Template Specs","Use when a user needs to migrate off Azure Blueprints (definitions and\u002For assignments) to Template Specs and Deployment Stacks before the January 31, 2027 retirement. Covers inventory, export, conversion to Bicep, policy decoupling, Template Spec publishing, Deployment Stack deployment with deny-settings, validation, and cutover.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1155,1156,1159,1162],{"name":12,"slug":9,"type":17},{"name":1157,"slug":1158,"type":17},"Deployment","deployment",{"name":1160,"slug":1161,"type":17},"Infrastructure as Code","infrastructure-as-code",{"name":1163,"slug":1164,"type":17},"Migration","migration",261,"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-blueprints","2026-08-20T03:28:18.136156",{"slug":1169,"name":1169,"fn":1170,"description":1171,"org":1172,"tags":1173,"stars":1184,"repoUrl":1185,"updatedAt":1186},"apiview-feedback-resolution","resolve APIView feedback on Azure SDKs","Analyze and resolve APIView review feedback on Azure SDK PRs. **UTILITY SKILL**. USE FOR: APIView comments, API review feedback, SDK API surface changes. DO NOT USE FOR: general code review, non-APIView feedback. INVOKES: azure-sdk-mcp:azsdk_apiview_get_comments, azure-sdk-mcp:azsdk_typespec_customized_code_update.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1174,1177,1178,1181],{"name":1175,"slug":1176,"type":17},"API Development","api-development",{"name":12,"slug":9,"type":17},{"name":1179,"slug":1180,"type":17},"Code Review","code-review",{"name":1182,"slug":1183,"type":17},"Documentation","documentation",136,"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-sdk-tools","2026-07-12T08:17:43.350876",{"slug":1188,"name":1188,"fn":1189,"description":1190,"org":1191,"tags":1192,"stars":1184,"repoUrl":1185,"updatedAt":1201},"azsdk-common-live-and-recorded-tests","deploy resources and run Azure SDK tests","Deploy test resources and run Azure SDK tests in live, record, or playback mode. WHEN: \"run live tests\", \"run recorded tests\", \"deploy test resources\", \"record tests\", \"run tests in record mode\", \"clean up test resources\", \"run tests against live resources\". DO NOT USE FOR: writing new tests, authoring Bicep templates, playback-only test runs without resource deployment. INVOKES: azure-sdk-mcp:azsdk_package_run_tests.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1193,1194,1195,1198],{"name":12,"slug":9,"type":17},{"name":1157,"slug":1158,"type":17},{"name":1196,"slug":1197,"type":17},"SDK","sdk",{"name":1199,"slug":1200,"type":17},"Testing","testing","2026-07-12T08:17:44.718943",{"slug":1203,"name":1203,"fn":1204,"description":1205,"org":1206,"tags":1207,"stars":1184,"repoUrl":1185,"updatedAt":1216},"azsdk-common-prepare-release-plan","manage Azure SDK release plan work items","Create, get, update, abandon, and link SDK PRs to release plan work items for Azure SDK releases. **UTILITY SKILL**. USE FOR: \"create release plan\", \"get release plan\", \"update release plan\", \"update API spec in release plan\", \"update SDK details in release plan\", \"abandon release plan\", \"link SDK PR to plan\", \"namespace approval\", \"check release plan status\". DO NOT USE FOR: SDK code generation, pipeline troubleshooting, API review feedback. INVOKES: azure-sdk-mcp:azsdk_create_release_plan, azure-sdk-mcp:azsdk_get_release_plan, azure-sdk-mcp:azsdk_get_release_plan_for_spec_pr, azure-sdk-mcp:azsdk_update_release_plan, azure-sdk-mcp:azsdk_update_api_spec_pull_request_in_release_plan, azure-sdk-mcp:azsdk_update_sdk_details_in_release_plan, azure-sdk-mcp:azsdk_abandon_release_plan, azure-sdk-mcp:azsdk_link_sdk_pull_request_to_release_plan, azure-sdk-mcp:azsdk_link_namespace_approval_issue.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1208,1209,1212,1215],{"name":12,"slug":9,"type":17},{"name":1210,"slug":1211,"type":17},"GitHub","github",{"name":1213,"slug":1214,"type":17},"Project Management","project-management",{"name":1196,"slug":1197,"type":17},"2026-07-12T08:17:38.345387",{"slug":1218,"name":1218,"fn":1219,"description":1220,"org":1221,"tags":1222,"stars":1184,"repoUrl":1185,"updatedAt":1229},"azsdk-common-sdk-release","release Azure SDK packages","Check release readiness and trigger the release pipeline for Azure SDK packages. **UTILITY SKILL**. USE FOR: \"release SDK\", \"trigger release\", \"check release readiness\", \"release pipeline\", \"publish package\", \"ship SDK\". DO NOT USE FOR: SDK development, code generation, pipeline debugging, release plan creation. INVOKES: azure-sdk-mcp:azsdk_release_sdk.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1223,1224,1227,1228],{"name":12,"slug":9,"type":17},{"name":1225,"slug":1226,"type":17},"CI\u002FCD","ci-cd",{"name":1157,"slug":1158,"type":17},{"name":1196,"slug":1197,"type":17},"2026-07-12T08:17:34.27607",{"slug":1231,"name":1231,"fn":1232,"description":1233,"org":1234,"tags":1235,"stars":1184,"repoUrl":1185,"updatedAt":1244},"azure-typespec-author","author and modify Azure TypeSpec API specifications","Authors and modifies Azure TypeSpec (.tsp) API specifications. USE FOR: any TypeSpec\u002Ftsp change — api versions (add, bump, preview, stable, promote), resources, operations, models, properties, decorators, visibility, constraints, breaking changes, LRO, suppressions, operationId, spread model. Covers ARM resource-manager and data-plane services. DO NOT USE FOR: SDK generation, releasing SDK packages, or single MCP tool calls. INVOKES: azure-sdk-mcp:azsdk_typespec_generate_authoring_plan, azure-sdk-mcp:azsdk_run_typespec_validation.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1236,1237,1238,1241],{"name":1175,"slug":1176,"type":17},{"name":12,"slug":9,"type":17},{"name":1239,"slug":1240,"type":17},"OpenAPI","openapi",{"name":1242,"slug":1243,"type":17},"Technical Writing","technical-writing","2026-07-12T08:17:39.603232",{"slug":1246,"name":1246,"fn":1247,"description":1248,"org":1249,"tags":1250,"stars":1184,"repoUrl":1185,"updatedAt":1255},"generate-sdk-locally","generate and test Azure SDKs locally","Generate, build, and test Azure SDKs locally from TypeSpec with automatic customization. WHEN: \"generate SDK locally\", \"build SDK\", \"run SDK tests\", \"run CI checks\", \"validate package\", \"run checks\", \"update changelog\", \"fix SDK build errors\", \"fix breaking changes\", \"resolve SDK generation errors\", \"customize TypeSpec\", \"rename SDK client\", \"rename SDK model\", \"hide operation from SDK\", \"fix analyzer errors\", \"resolve customization drift\", \"create subclient\", \"update metadata\", \"update version\". DO NOT USE FOR: publishing to package registries, CI pipeline configuration, API design review. INVOKES: azsdk_verify_setup, azsdk_package_generate_code, azsdk_package_build_code, azsdk_package_run_check, azsdk_package_run_tests, azsdk_customized_code_update, azsdk_package_update_changelog_content, azsdk_package_update_metadata, azsdk_package_update_version.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1251,1252,1253,1254],{"name":12,"slug":9,"type":17},{"name":1225,"slug":1226,"type":17},{"name":1196,"slug":1197,"type":17},{"name":1199,"slug":1200,"type":17},"2026-07-12T08:17:37.08523",{"slug":1257,"name":1257,"fn":1258,"description":1259,"org":1260,"tags":1261,"stars":1184,"repoUrl":1185,"updatedAt":1269},"markdown-token-optimizer","optimize markdown files for token efficiency","Analyze markdown files for token efficiency and reduce context-window bloat. **UTILITY SKILL**. DO NOT USE FOR: code optimization, general file editing, non-markdown files. TRIGGERS: optimize markdown, reduce tokens, token count, token bloat, too many tokens, make concise, shrink file, file too large, optimize for AI, token efficiency, verbose markdown, reduce file size. INVOKES: waza CLI.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1262,1265,1268],{"name":1263,"slug":1264,"type":17},"LLM","llm",{"name":1266,"slug":1267,"type":17},"Performance","performance",{"name":1242,"slug":1243,"type":17},"2026-07-12T08:17:42.080413",{"slug":1271,"name":1271,"fn":1272,"description":1273,"org":1274,"tags":1275,"stars":1184,"repoUrl":1185,"updatedAt":1282},"pipeline-troubleshooting","troubleshoot Azure SDK CI pipelines","Diagnose and resolve failures in Azure SDK CI and generation pipelines. **UTILITY SKILL**. USE FOR: \"pipeline failed\", \"build failure\", \"CI check failing\", \"SDK generation error\", \"reproduce pipeline locally\", \"debug SDK pipeline\". DO NOT USE FOR: local build issues without pipeline context, API design review, SDK publishing. INVOKES: azure-sdk-mcp:azsdk_analyze_pipeline, azure-sdk-mcp:azsdk_package_build_code, azure-sdk-mcp:azsdk_package_run_check.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1276,1277,1278,1281],{"name":12,"slug":9,"type":17},{"name":1225,"slug":1226,"type":17},{"name":1279,"slug":1280,"type":17},"Debugging","debugging",{"name":1196,"slug":1197,"type":17},"2026-07-12T08:17:40.821512",{"slug":1284,"name":1284,"fn":1285,"description":1286,"org":1287,"tags":1288,"stars":1184,"repoUrl":1185,"updatedAt":1294},"skill-authoring","author agent skills for agentskills.io","Write Agent Skills that comply with the agentskills.io specification. WHEN: \"create a skill\", \"new skill\", \"write a skill\", \"skill template\", \"skill structure\", \"review skill\", \"skill PR\", \"skill compliance\", \"SKILL.md format\", \"skill frontmatter\", \"skill best practices\". DO NOT USE FOR: general documentation. INVOKES: waza CLI.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1289,1290,1293],{"name":1182,"slug":1183,"type":17},{"name":1291,"slug":1292,"type":17},"Plugin Development","plugin-development",{"name":1242,"slug":1243,"type":17},"2026-08-07T04:39:22.66861",{"slug":1296,"name":1296,"fn":1297,"description":1298,"org":1299,"tags":1300,"stars":1306,"repoUrl":1307,"updatedAt":1308},"kickstart-acr-integration","integrate Azure Container Registry with AKS","ACR integration for AKS Automatic. Teaches attaching an ACR, image reference conventions (digest pinning, no :latest), and pull-secret-free authentication via the managed identity.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1301,1302,1305],{"name":12,"slug":9,"type":17},{"name":1303,"slug":1304,"type":17},"Containers","containers",{"name":1157,"slug":1158,"type":17},65,"https:\u002F\u002Fgithub.com\u002FAzure\u002Fvscode-aks-tools","2026-07-12T08:18:05.091337",124,{"items":1311,"total":1426},[1312,1320,1338,1359,1378,1392,1407],{"slug":4,"name":5,"fn":6,"description":7,"org":1313,"tags":1314,"stars":28,"repoUrl":29,"updatedAt":30},{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1315,1316,1317,1318,1319],{"name":26,"slug":27,"type":17},{"name":12,"slug":9,"type":17},{"name":23,"slug":24,"type":17},{"name":20,"slug":21,"type":17},{"name":15,"slug":16,"type":17},{"slug":1321,"name":1322,"fn":1323,"description":1324,"org":1325,"tags":1326,"stars":28,"repoUrl":29,"updatedAt":1337},"atlassianrovo","atlassian_rovo","manage Atlassian Jira and Confluence tasks","Expertise in Atlassian Cloud products including Jira, Confluence, Compass, and Jira Service Management. Use for searching issues with JQL, creating and updating pages, managing service components, investigating ops alerts, and navigating Atlassian workspaces via the Rovo MCP server.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1327,1330,1333,1336],{"name":1328,"slug":1329,"type":17},"Atlassian","atlassian",{"name":1331,"slug":1332,"type":17},"Confluence","confluence",{"name":1334,"slug":1335,"type":17},"Jira","jira",{"name":1213,"slug":1214,"type":17},"2026-07-12T08:20:33.735452",{"slug":1339,"name":1340,"fn":1341,"description":1342,"org":1343,"tags":1344,"stars":28,"repoUrl":29,"updatedAt":1358},"awscloudoperations","aws_cloud_operations","manage and troubleshoot AWS cloud operations","Expertise in AWS cloud operations including infrastructure management, troubleshooting, documentation search, API execution, and operational procedures. Use for querying AWS resources, investigating incidents, following SOPs, searching documentation, checking service availability, and executing AWS API calls via the AWS MCP Server.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1345,1348,1349,1352,1355],{"name":1346,"slug":1347,"type":17},"AWS","aws",{"name":1279,"slug":1280,"type":17},{"name":1350,"slug":1351,"type":17},"Infrastructure","infrastructure",{"name":1353,"slug":1354,"type":17},"Monitoring","monitoring",{"name":1356,"slug":1357,"type":17},"Operations","operations","2026-07-12T08:20:14.702793",{"slug":1360,"name":1361,"fn":1362,"description":1363,"org":1364,"tags":1365,"stars":28,"repoUrl":29,"updatedAt":1377},"azuremanagedgrafana","azure_managed_grafana","monitor Azure infrastructure with Grafana","Expertise in Azure Managed Grafana including dashboards, Azure Monitor metrics, Application Insights failures and traces, Azure Data Explorer (Kusto) queries, SQL Server queries, and Azure Resource Graph. Use for querying observability data, searching dashboards, investigating failures, analyzing GenAI agent telemetry, and running KQL or SQL queries via the AMG-MCP endpoint.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1366,1369,1370,1373,1374],{"name":1367,"slug":1368,"type":17},"Application Insights","application-insights",{"name":12,"slug":9,"type":17},{"name":1371,"slug":1372,"type":17},"Dashboards","dashboards",{"name":1353,"slug":1354,"type":17},{"name":1375,"slug":1376,"type":17},"Observability","observability","2026-07-12T08:19:37.659849",{"slug":1379,"name":1380,"fn":1381,"description":1382,"org":1383,"tags":1384,"stars":28,"repoUrl":29,"updatedAt":1391},"capacityplanning","capacity_planning","assess Azure resource capacity and scaling","Assess Azure resource capacity, quota utilization, and growth trends to prevent outages from resource exhaustion. Use when asked about capacity, quotas, scaling readiness, load testing prep, or growth projections.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1385,1386,1389,1390],{"name":12,"slug":9,"type":17},{"name":1387,"slug":1388,"type":17},"Capacity Planning","capacity-planning",{"name":1356,"slug":1357,"type":17},{"name":1266,"slug":1267,"type":17},"2026-08-23T04:00:12.510248",{"slug":1393,"name":1394,"fn":1395,"description":1396,"org":1397,"tags":1398,"stars":28,"repoUrl":29,"updatedAt":1406},"compliancegovernanceaudit","compliance_governance_audit","audit Azure compliance and governance","Audit Azure environment for compliance and governance posture. Checks Azure Policy, RBAC, tagging, resource locks, naming conventions, and regulatory alignment. Use when asked about compliance, governance, audit readiness, or policy violations.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1399,1402,1403,1404,1405],{"name":1400,"slug":1401,"type":17},"Audit","audit",{"name":12,"slug":9,"type":17},{"name":1138,"slug":1139,"type":17},{"name":1141,"slug":1142,"type":17},{"name":15,"slug":16,"type":17},"2026-08-23T04:00:39.064619",{"slug":1408,"name":1409,"fn":1410,"description":1411,"org":1412,"tags":1413,"stars":28,"repoUrl":29,"updatedAt":1425},"datadogobservability","datadog_observability","query Datadog telemetry and investigate behavior","Expertise in Datadog's observability platform including logs, metrics, APM, monitors, incidents, dashboards, hosts, and services. Use for searching logs, querying metrics, investigating incidents, analyzing traces, inspecting monitors, and navigating Datadog data via the Datadog MCP server.",{"slug":9,"name":10,"logoUrl":11,"githubOrg":12},[1414,1417,1420,1423,1424],{"name":1415,"slug":1416,"type":17},"Datadog","datadog",{"name":1418,"slug":1419,"type":17},"Logs","logs",{"name":1421,"slug":1422,"type":17},"Metrics","metrics",{"name":1353,"slug":1354,"type":17},{"name":1375,"slug":1376,"type":17},"2026-07-12T08:20:41.400308",15]