Is azure-app-onboard safe?
Grade A, 98/100. No meaningful risk found.
End-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq).
Aazure-app-onboard
.github/plugins/azure-skills/skills/azure-app-onboard98/100 · No meaningful risk found1 low
azure-app-onboard
.github/plugins/azure-skills/skills/azure-app-onboardEnd-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq).
- Content hash
- sha256:c6f45ad11e06afccc211460ecb4aa3524fa76ebd7ce42dde5fdb560d564a5b08
- Files
- 12
- Quality
- 100/100
Security findings
- lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/azure-app-onboard/references/azd-template-routing.md:61
3. **Invoke azure-prepare directly:** Call `{"skill": "azure-prepare"}` to load the skill, then follow its workflow using the user's original prompt from `cont…The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.
Files in this skill
- SKILL.md6.6 KB
- references/approval-gates.md7.4 KB
- references/azd-template-routing.md4.7 KB
- references/handoff-protocol.md7.8 KB
- references/iac-resources.md2.6 KB
- references/intent-gathering.md2.2 KB
- references/mcp-tool-reference.md3.7 KB
- references/pipeline-rules-runtime.md3.5 KB
- references/pipeline-rules.md6.3 KB
- references/session-protocol.md8.0 KB
- references/session-schemas.ts5.2 KB
- references/subscription-resolution.md2.1 KB
Questions about azure-app-onboard
- Is azure-app-onboard safe to install?
- Our scanner gave azure-app-onboard grade A (98/100): no meaningful risk found. It matched 1 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
- How do I install azure-app-onboard in Claude Code or Codex?
- Run skillhash add github:microsoft/azure-skills/.github/plugins/azure-skills/skills/azure-app-onboard. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
- What happens if azure-app-onboard changes upstream?
- Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.
More from microsoft/azure-skills
- A
azure-advisor
1.6kmicrosoft/azure-skills
Use Azure Advisor recommendations. WHEN: "show Advisor recommendations", "service retirements", "update recommendation status". DO NOT USE FOR: fixes or remediation (use azure-advisor-actionability).
No security findings - A
aks-gpu-inference
1.6kmicrosoft/azure-skills
Diagnose Day-2 AKS GPU and KAITO incidents using profile-aware, read-only evidence. WHEN: 'Insufficient nvidia.com/gpu', GPU pod Pending, model-load OOM, DCGM/VRAM, KAITO Workspace not ready, or GPU autoscaling. DO NOT USE FOR: setup (airunway-aks-setup), non-GPU incidents (aks-troubleshooting), standalone VM quota (azure-quotas), or generic cost (cost-analysis or cost-optimization from the optional azure-cost plugin).
No security findings - A
prepare
1.6kmicrosoft/azure-skills
No description in SKILL.md.
No security findings - A
aks-known-issues
1.6kmicrosoft/azure-skills
Lookup documented AKS fixes only when the prompt includes an exact catalog signature and all of its qualifiers: VMCannotFitEphemeralOSDisk; NodePoolMcVersionIncompatible; 'NodeImageVersion is not accepted'; AKS SkuNotAvailable with size, location, and zone; ZonalAllocationFailed with insufficient zone capacity; OverconstrainedAllocationRequest with listed constraints; nested AKS vmssCSE/CSE VMExtensionError_OutboundConnFail, VMExtensionError_K8SAPIServerConnFail, or VMExtensionError_K8SAPIServerDNSLookupFail; or AllocationFailed with the full cataloged internal-error or insufficient-regional-capacity message. Never use for quota errors, code-only or bare wrappers, generic symptoms, incomplete signatures, or failures outside AKS; use aks-troubleshooting or azure-diagnostics.
No security findings - A
aks-network-capture
1.6kmicrosoft/azure-skills
Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: "capture packets on an AKS node", "take a pcap", "run tcpdump on AKS", "prove where packets drop". Use for explicit packet-capture intent after read-only diagnostics, not general AKS connectivity or ingress troubleshooting.
No security findings - A
aks-troubleshooting
1.6kmicrosoft/azure-skills
Debug live Azure Kubernetes Service (AKS) incidents with a read-only, evidence-first investigation. WHEN: pod crashes or Pending, CrashLoopBackOff, OOMKilled, ImagePullBackOff, node NotReady, DNS or ingress failure, connectivity timeout, network policy, SNAT exhaustion, node-pool scaling blocked by QuotaExceeded or InsufficientVCPUQuota, upgrade stuck, spot or zone disruption, a bare VMExtensionProvisioningError or AllocationFailed wrapper, an uncataloged capacity symptom, or 'investigate my AKS cluster'. DO NOT USE FOR: packet capture (use aks-network-capture); GPU or model-serving issues (use aks-gpu-inference); cluster creation or provisioning (use azure-kubernetes); cost (use cost-analysis from the optional azure-cost plugin); pod rightsizing (use azure-kubernetes); a fully qualified documented AKS signature with every required nested qualifier (use aks-known-issues); standalone failures on non-AKS Azure resources (use azure-diagnostics). Unqualified errors and open-ended incidents stay here only for AKS.
No security findings - A
scaffold
1.6kmicrosoft/azure-skills
No description in SKILL.md.
No security findings - A
azure-advisor-actionability
1.6kmicrosoft/azure-skills
Remediate Azure Advisor recommendations. WHEN: "fix Advisor recommendation".
No security findings