Is azure-prepare safe?
Grade A, 98/100. No meaningful risk found.
Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.
Aazure-prepare
skills/azure-prepare98/100 · No meaningful risk found1 low
azure-prepare
skills/azure-preparePrepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.
- Content hash
- sha256:c2bbc7cefabcc1693750e11b42c669ce6f37e0f75720e7a4ce6d654c92df81df
- Files
- 166
- Quality
- 100/100
Security findings
- lowPipes a download into a shellSL301 · skills/azure-prepare/references/sdk/azd-deployment.md:8
curl -fsSL https://aka.ms/install-azd.sh | bashRemote code is executed without being reviewed or pinned. Whoever controls that URL controls your machine. Fix: Download to a file, verify a checksum, then run it. Or vendor the script into the skill. Severity lowered: the line reads as documentation, not an instruction.
- infoUnpinned package installSL501 · skills/azure-prepare/references/sdk/azure-identity-py.md:9
pip install azure-identityInstalling without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.
- infoUnpinned package installSL501 · skills/azure-prepare/references/sdk/azure-identity-ts.md:8
npm install @azure/identityInstalling without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.
- infoUnpinned package installSL501 · skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/nodejs.md:10
npx prisma initInstalling without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.
- infoUnpinned package installSL501 · skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/nodejs.md:106
npx prisma migrate deploy --schema src/prisma/schema.prismaInstalling without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.
- infoUnpinned package installSL501 · skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/nodejs.md:122
- Run `npx prisma generate` after schema changes to regenerate the clientInstalling without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.
Files in this skill
- SKILL.md12.6 KB
- references/analyze.md4.0 KB
- references/apim.md5.7 KB
- references/architecture.md6.7 KB
- references/aspire.md18.2 KB
- references/auth-best-practices.md6.1 KB
- references/azure-context.md5.7 KB
- references/functional-verification.md3.2 KB
- references/generate.md5.3 KB
- references/global-rules.md2.0 KB
- references/plan-template.md10.1 KB
- references/recipe-selection.md3.2 KB
- references/region-availability.md1.7 KB
- references/requirements.md2.5 KB
- references/research.md8.6 KB
- references/resources-limits-quotas.md13.0 KB
- references/scan.md3.0 KB
- references/security.md8.5 KB
- references/specialized-routing.md4.3 KB
- references/recipes/azcli/README.md1.8 KB
- references/recipes/azcli/commands.md1.6 KB
- references/recipes/azcli/scripts.md2.2 KB
- references/recipes/azd/README.md3.8 KB
- references/recipes/azd/aspire.md8.9 KB
- references/recipes/azd/azure-yaml.md6.7 KB
- references/recipes/azd/docker.md2.0 KB
- references/recipes/azd/iac-rules.md5.8 KB
- references/recipes/azd/terraform.md14.0 KB
- references/recipes/bicep/README.md1.4 KB
- references/recipes/bicep/patterns.md3.0 KB
- references/recipes/terraform/README.md2.5 KB
- references/recipes/terraform/patterns.md3.5 KB
- references/runtimes/nodejs.md5.9 KB
- references/sdk/azd-deployment.md792 B
- references/sdk/azure-appconfiguration-java.md1.5 KB
- references/sdk/azure-appconfiguration-py.md1.1 KB
- references/sdk/azure-appconfiguration-ts.md1.2 KB
- references/sdk/azure-identity-dotnet.md941 B
- references/sdk/azure-identity-java.md1.2 KB
- references/sdk/azure-identity-py.md1.1 KB
- references/sdk/azure-identity-ts.md1.1 KB
- references/services/aks/README.md1.0 KB
- references/services/aks/addons.md957 B
- references/services/aks/bicep.md1.6 KB
- references/services/aks/manifests.md1.4 KB
- references/services/app-insights/README.md848 B
- references/services/app-service/README.md2.3 KB
- references/services/app-service/bicep.md4.2 KB
- references/services/app-service/custom-domains.md4.8 KB
- references/services/app-service/deployment-slots.md4.5 KB
- references/services/app-service/networking.md6.6 KB
- references/services/app-service/scaling.md1.5 KB
- references/services/app-service/sku-selection.md4.7 KB
- references/services/app-service/templates/selection.md2.8 KB
- references/services/app-service/templates/web-api.md4.9 KB
- references/services/app-service/templates/web-app.md4.9 KB
- references/services/app-service/templates/recipes/README.md2.8 KB
- references/services/app-service/templates/recipes/composition.md4.8 KB
- references/services/app-service/templates/recipes/auth/README.md3.1 KB
- references/services/app-service/templates/recipes/auth/source/dotnet.md1.3 KB
- references/services/app-service/templates/recipes/auth/source/nodejs.md2.5 KB
- references/services/app-service/templates/recipes/auth/source/python.md2.2 KB
- references/services/app-service/templates/recipes/cosmos/README.md3.6 KB
- references/services/app-service/templates/recipes/cosmos/source/dotnet.md1.3 KB
- references/services/app-service/templates/recipes/cosmos/source/nodejs.md1.2 KB
- references/services/app-service/templates/recipes/cosmos/source/python.md1.1 KB
- references/services/app-service/templates/recipes/redis/README.md3.3 KB
- references/services/app-service/templates/recipes/redis/source/dotnet.md1.6 KB
- references/services/app-service/templates/recipes/redis/source/nodejs.md2.2 KB
- references/services/app-service/templates/recipes/redis/source/python.md2.9 KB
- references/services/app-service/templates/recipes/sql/README.md3.5 KB
- references/services/app-service/templates/recipes/sql/source/dotnet.md2.9 KB
- references/services/app-service/templates/recipes/sql/source/nodejs.md3.0 KB
- references/services/app-service/templates/recipes/sql/source/python.md4.4 KB
- references/services/container-apps/README.md1.3 KB
- references/services/container-apps/bicep.md4.8 KB
- references/services/container-apps/day2-operations.md5.1 KB
- references/services/container-apps/environment.md1.2 KB
- references/services/container-apps/health-probes.md1.1 KB
- references/services/container-apps/networking.md5.1 KB
- references/services/container-apps/revisions.md4.9 KB
- references/services/container-apps/scaling.md1.4 KB
- references/services/container-apps/terraform.md6.1 KB
- references/services/cosmos-db/README.md1.4 KB
- references/services/cosmos-db/bicep.md1.8 KB
- references/services/cosmos-db/partitioning.md1.1 KB
- references/services/cosmos-db/sdk.md1.6 KB
- references/services/durable-task-scheduler/README.md4.9 KB
- references/services/durable-task-scheduler/bicep.md4.8 KB
- references/services/durable-task-scheduler/dotnet.md6.1 KB
- references/services/durable-task-scheduler/java.md7.7 KB
- references/services/durable-task-scheduler/javascript.md5.6 KB
- references/services/durable-task-scheduler/python.md6.4 KB
- references/services/event-grid/README.md1.0 KB
- references/services/event-grid/bicep.md1.7 KB
- references/services/event-grid/subscriptions.md1.6 KB
- references/services/foundry/README.md1.3 KB
- references/services/foundry/region-availability.md826 B
- references/services/functions/README.md3.1 KB
- references/services/functions/aspire-containerapps.md3.3 KB
- references/services/functions/bicep.md11.9 KB
- references/services/functions/cold-start.md6.3 KB
- references/services/functions/durable.md1.8 KB
- references/services/functions/hosting-plans.md6.8 KB
- references/services/functions/terraform.md13.3 KB
- references/services/functions/templates/README.md6.5 KB
- references/services/functions/templates/selection.md4.3 KB
- references/services/functions/templates/base/eval/python.md762 B
- references/services/functions/templates/base/eval/summary.md1.9 KB
- references/services/functions/templates/base/eval/typescript.md1.1 KB
- references/services/functions/templates/recipes/README.md1.1 KB
- references/services/functions/templates/recipes/composition.md11.1 KB
- references/services/functions/templates/recipes/blob-eventgrid/README.md1.6 KB
- references/services/functions/templates/recipes/blob-eventgrid/eval/python.md1.2 KB
- references/services/functions/templates/recipes/blob-eventgrid/eval/summary.md2.6 KB
- references/services/functions/templates/recipes/common/dotnet-entry-point.md2.0 KB
- references/services/functions/templates/recipes/common/error-handling.md2.2 KB
- references/services/functions/templates/recipes/common/health-check.md2.7 KB
- references/services/functions/templates/recipes/common/nodejs-entry-point.md4.1 KB
- references/services/functions/templates/recipes/cosmosdb/README.md1.5 KB
- references/services/functions/templates/recipes/cosmosdb/eval/python.md1.2 KB
- references/services/functions/templates/recipes/cosmosdb/eval/summary.md1.8 KB
- references/services/functions/templates/recipes/cosmosdb/eval/typescript.md1.3 KB
- references/services/functions/templates/recipes/durable/README.md1.8 KB
- references/services/functions/templates/recipes/durable/eval/python.md1.2 KB
- references/services/functions/templates/recipes/durable/eval/summary.md1.6 KB
- references/services/functions/templates/recipes/eventhubs/README.md1.2 KB
- references/services/functions/templates/recipes/eventhubs/eval/python.md1.2 KB
- references/services/functions/templates/recipes/eventhubs/eval/summary.md1.5 KB
- references/services/functions/templates/recipes/mcp/README.md1.9 KB
- references/services/functions/templates/recipes/mcp/eval/python.md1.2 KB
- references/services/functions/templates/recipes/mcp/eval/summary.md1.5 KB
- references/services/functions/templates/recipes/servicebus/README.md1.3 KB
- references/services/functions/templates/recipes/servicebus/eval/python.md1.3 KB
- references/services/functions/templates/recipes/servicebus/eval/summary.md1.8 KB
- references/services/functions/templates/recipes/servicebus/eval/typescript.md1.4 KB
- references/services/functions/templates/recipes/sql/README.md1.8 KB
- references/services/functions/templates/recipes/sql/eval/python.md1.2 KB
- references/services/functions/templates/recipes/sql/eval/summary.md2.8 KB
- references/services/functions/templates/recipes/timer/README.md1.5 KB
- references/services/functions/templates/recipes/timer/eval/python.md1.2 KB
- references/services/functions/templates/recipes/timer/eval/summary.md1.5 KB
- references/services/key-vault/README.md1.3 KB
- references/services/key-vault/bicep.md1.7 KB
- references/services/key-vault/sdk.md1.9 KB
- references/services/logic-apps/README.md1.0 KB
- references/services/logic-apps/bicep.md1.8 KB
- references/services/logic-apps/triggers.md1.7 KB
- references/services/service-bus/README.md1.4 KB
- references/services/service-bus/bicep.md3.7 KB
- references/services/service-bus/patterns.md4.2 KB
- references/services/sql-database/README.md1.9 KB
- references/services/sql-database/auth.md4.0 KB
- references/services/sql-database/bicep.md7.8 KB
- references/services/sql-database/sdk.md1.8 KB
- references/services/sql-database/scripts/grant-sql-access.ps13.4 KB
- references/services/sql-database/scripts/grant-sql-access.sh3.5 KB
- references/services/static-web-apps/README.md1.3 KB
- references/services/static-web-apps/bicep.md1.0 KB
- references/services/static-web-apps/deployment.md1.8 KB
- references/services/static-web-apps/region-availability.md674 B
- references/services/static-web-apps/routing.md1.2 KB
- references/services/static-web-apps/terraform.md3.5 KB
- references/services/storage/README.md1.4 KB
- references/services/storage/access.md3.6 KB
- references/services/storage/bicep.md1.7 KB
Questions about azure-prepare
- Is azure-prepare safe to install?
- Our scanner gave azure-prepare grade A (98/100): no meaningful risk found. It matched 1 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
- How do I install azure-prepare in Claude Code or Codex?
- Run skillhash add github:microsoft/azure-skills/skills/azure-prepare. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
- What happens if azure-prepare changes upstream?
- Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.
More from microsoft/azure-skills
- A
azure-advisor
1.6kmicrosoft/azure-skills
Use Azure Advisor recommendations. WHEN: "show Advisor recommendations", "service retirements", "update recommendation status". DO NOT USE FOR: fixes or remediation (use azure-advisor-actionability).
No security findings - A
aks-gpu-inference
1.6kmicrosoft/azure-skills
Diagnose Day-2 AKS GPU and KAITO incidents using profile-aware, read-only evidence. WHEN: 'Insufficient nvidia.com/gpu', GPU pod Pending, model-load OOM, DCGM/VRAM, KAITO Workspace not ready, or GPU autoscaling. DO NOT USE FOR: setup (airunway-aks-setup), non-GPU incidents (aks-troubleshooting), standalone VM quota (azure-quotas), or generic cost (cost-analysis or cost-optimization from the optional azure-cost plugin).
No security findings - A
prepare
1.6kmicrosoft/azure-skills
No description in SKILL.md.
No security findings - A
aks-known-issues
1.6kmicrosoft/azure-skills
Lookup documented AKS fixes only when the prompt includes an exact catalog signature and all of its qualifiers: VMCannotFitEphemeralOSDisk; NodePoolMcVersionIncompatible; 'NodeImageVersion is not accepted'; AKS SkuNotAvailable with size, location, and zone; ZonalAllocationFailed with insufficient zone capacity; OverconstrainedAllocationRequest with listed constraints; nested AKS vmssCSE/CSE VMExtensionError_OutboundConnFail, VMExtensionError_K8SAPIServerConnFail, or VMExtensionError_K8SAPIServerDNSLookupFail; or AllocationFailed with the full cataloged internal-error or insufficient-regional-capacity message. Never use for quota errors, code-only or bare wrappers, generic symptoms, incomplete signatures, or failures outside AKS; use aks-troubleshooting or azure-diagnostics.
No security findings - A
aks-network-capture
1.6kmicrosoft/azure-skills
Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: "capture packets on an AKS node", "take a pcap", "run tcpdump on AKS", "prove where packets drop". Use for explicit packet-capture intent after read-only diagnostics, not general AKS connectivity or ingress troubleshooting.
No security findings - A
aks-troubleshooting
1.6kmicrosoft/azure-skills
Debug live Azure Kubernetes Service (AKS) incidents with a read-only, evidence-first investigation. WHEN: pod crashes or Pending, CrashLoopBackOff, OOMKilled, ImagePullBackOff, node NotReady, DNS or ingress failure, connectivity timeout, network policy, SNAT exhaustion, node-pool scaling blocked by QuotaExceeded or InsufficientVCPUQuota, upgrade stuck, spot or zone disruption, a bare VMExtensionProvisioningError or AllocationFailed wrapper, an uncataloged capacity symptom, or 'investigate my AKS cluster'. DO NOT USE FOR: packet capture (use aks-network-capture); GPU or model-serving issues (use aks-gpu-inference); cluster creation or provisioning (use azure-kubernetes); cost (use cost-analysis from the optional azure-cost plugin); pod rightsizing (use azure-kubernetes); a fully qualified documented AKS signature with every required nested qualifier (use aks-known-issues); standalone failures on non-AKS Azure resources (use azure-diagnostics). Unqualified errors and open-ended incidents stay here only for AKS.
No security findings - A
scaffold
1.6kmicrosoft/azure-skills
No description in SKILL.md.
No security findings - A
azure-advisor-actionability
1.6kmicrosoft/azure-skills
Remediate Azure Advisor recommendations. WHEN: "fix Advisor recommendation".
No security findings