The Agent Skills Directory

[Secure Identity and Authentication]: The skill consistently prioritizes the use of Azure Managed Identities and Entra ID (formerly Azure AD) over traditional connection strings or passwords. It includes mandatory rules against generating SQL administrator credentials in infrastructure templates and provides patterns for passwordless database access using DefaultAzureCredential and ManagedIdentityCredential.
[Trusted Resource Acquisition]: Remote code patterns identified in the skill, such as the azd installation script and Azure Functions templates, originate from official Microsoft domains (aka.ms, azure.com) or trusted GitHub organizations. These are recognized as well-known technology services and are documented as safe infrastructure components.
[Least Privilege RBAC Patterns]: Infrastructure guidance includes explicit Bicep and Terraform patterns for assigning least-privilege RBAC roles (e.g., Key Vault Secrets User, Storage Blob Data Contributor, AcrPull). This ensures that applications and services have only the necessary permissions to function, reducing the attack surface.
[Secure Configuration Management]: The skill mandates the use of Azure Key Vault for managing sensitive data such as secrets and certificates. It provides clear instructions for referencing Key Vault secrets in various Azure compute targets (App Service, Container Apps, Functions) without exposing them in plain text or infrastructure logs.
[Automated Security Compliance]: Specific rules, such as Rule 10, forbid the generation of insecure SQL authentication properties. Additionally, the skill includes specialized logic to verify subscription policies and regional resource quotas before deployment, ensuring that generated artifacts comply with organizational and platform constraints.

azure-prepare