Is azure-enterprise-infra-planner safe?
Grade A, 100/100. No meaningful risk found.
Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.
Aazure-enterprise-infra-planner
skills/azure-enterprise-infra-planner100/100 · No meaningful risk foundNo security findings
azure-enterprise-infra-planner
skills/azure-enterprise-infra-plannerArchitect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.
- Content hash
- sha256:f2e7855eb0086a663bab64ec30b6f8d369e85ff4e554c7ad84563eab367f044c
- Files
- 41
- Quality
- 100/100
Security findings
None of the 30 rules matched.
Files in this skill
- SKILL.md6.2 KB
- references/bicep-generation.md5.1 KB
- references/deployment.md3.7 KB
- references/pairing-checks.md3.7 KB
- references/referenced-workload.md7.3 KB
- references/schema.md3.8 KB
- references/terraform-generation.md4.4 KB
- references/verification.md2.6 KB
- references/waf-checklist.md1.9 KB
- references/workflow.md4.9 KB
- references/constraints/README.md1.2 KB
- references/constraints/ai-ml.md3.2 KB
- references/constraints/compute-apps.md7.8 KB
- references/constraints/compute-infra.md4.5 KB
- references/constraints/data-analytics.md6.3 KB
- references/constraints/data-relational.md4.9 KB
- references/constraints/messaging.md2.5 KB
- references/constraints/monitoring.md1.7 KB
- references/constraints/networking-connectivity.md6.1 KB
- references/constraints/networking-core.md7.0 KB
- references/constraints/networking-traffic.md4.6 KB
- references/constraints/security.md2.4 KB
- references/phases/1-extract-insights.md2.6 KB
- references/phases/2-research-best-practices.md2.8 KB
- references/phases/3-research-resources.md3.3 KB
- references/phases/4-generate-plan.md792 B
- references/phases/5-verify.md814 B
- references/phases/6-generate-iac.md2.5 KB
- references/phases/7-deploy.md1.3 KB
- references/resources/README.md1.6 KB
- references/resources/ai-ml.md2.1 KB
- references/resources/compute-apps.md4.0 KB
- references/resources/compute-infra.md2.8 KB
- references/resources/data-analytics.md3.0 KB
- references/resources/data-relational.md2.6 KB
- references/resources/messaging.md2.0 KB
- references/resources/monitoring.md1.5 KB
- references/resources/networking-connectivity.md3.6 KB
- references/resources/networking-core.md4.3 KB
- references/resources/networking-traffic.md2.6 KB
- references/resources/security.md1.5 KB
Questions about azure-enterprise-infra-planner
- Is azure-enterprise-infra-planner safe to install?
- Our scanner gave azure-enterprise-infra-planner grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
- How do I install azure-enterprise-infra-planner in Claude Code or Codex?
- Run skillhash add github:microsoft/azure-skills/skills/azure-enterprise-infra-planner. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
- What happens if azure-enterprise-infra-planner changes upstream?
- Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.
More from microsoft/azure-skills
- A
azure-advisor
1.6kmicrosoft/azure-skills
Use Azure Advisor recommendations. WHEN: "show Advisor recommendations", "service retirements", "update recommendation status". DO NOT USE FOR: fixes or remediation (use azure-advisor-actionability).
No security findings - A
aks-gpu-inference
1.6kmicrosoft/azure-skills
Diagnose Day-2 AKS GPU and KAITO incidents using profile-aware, read-only evidence. WHEN: 'Insufficient nvidia.com/gpu', GPU pod Pending, model-load OOM, DCGM/VRAM, KAITO Workspace not ready, or GPU autoscaling. DO NOT USE FOR: setup (airunway-aks-setup), non-GPU incidents (aks-troubleshooting), standalone VM quota (azure-quotas), or generic cost (cost-analysis or cost-optimization from the optional azure-cost plugin).
No security findings - A
prepare
1.6kmicrosoft/azure-skills
No description in SKILL.md.
No security findings - A
aks-known-issues
1.6kmicrosoft/azure-skills
Lookup documented AKS fixes only when the prompt includes an exact catalog signature and all of its qualifiers: VMCannotFitEphemeralOSDisk; NodePoolMcVersionIncompatible; 'NodeImageVersion is not accepted'; AKS SkuNotAvailable with size, location, and zone; ZonalAllocationFailed with insufficient zone capacity; OverconstrainedAllocationRequest with listed constraints; nested AKS vmssCSE/CSE VMExtensionError_OutboundConnFail, VMExtensionError_K8SAPIServerConnFail, or VMExtensionError_K8SAPIServerDNSLookupFail; or AllocationFailed with the full cataloged internal-error or insufficient-regional-capacity message. Never use for quota errors, code-only or bare wrappers, generic symptoms, incomplete signatures, or failures outside AKS; use aks-troubleshooting or azure-diagnostics.
No security findings - A
aks-network-capture
1.6kmicrosoft/azure-skills
Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: "capture packets on an AKS node", "take a pcap", "run tcpdump on AKS", "prove where packets drop". Use for explicit packet-capture intent after read-only diagnostics, not general AKS connectivity or ingress troubleshooting.
No security findings - A
aks-troubleshooting
1.6kmicrosoft/azure-skills
Debug live Azure Kubernetes Service (AKS) incidents with a read-only, evidence-first investigation. WHEN: pod crashes or Pending, CrashLoopBackOff, OOMKilled, ImagePullBackOff, node NotReady, DNS or ingress failure, connectivity timeout, network policy, SNAT exhaustion, node-pool scaling blocked by QuotaExceeded or InsufficientVCPUQuota, upgrade stuck, spot or zone disruption, a bare VMExtensionProvisioningError or AllocationFailed wrapper, an uncataloged capacity symptom, or 'investigate my AKS cluster'. DO NOT USE FOR: packet capture (use aks-network-capture); GPU or model-serving issues (use aks-gpu-inference); cluster creation or provisioning (use azure-kubernetes); cost (use cost-analysis from the optional azure-cost plugin); pod rightsizing (use azure-kubernetes); a fully qualified documented AKS signature with every required nested qualifier (use aks-known-issues); standalone failures on non-AKS Azure resources (use azure-diagnostics). Unqualified errors and open-ended incidents stay here only for AKS.
No security findings - A
scaffold
1.6kmicrosoft/azure-skills
No description in SKILL.md.
No security findings - A
azure-advisor-actionability
1.6kmicrosoft/azure-skills
Remediate Azure Advisor recommendations. WHEN: "fix Advisor recommendation".
No security findings