The Agent Skills Directory

Automated Command Execution: The skill includes a Python script (upgrade_bom.py) that executes Maven and Gradle commands via subprocess calls. These operations are used to apply OpenRewrite recipes for dependency modernization. The commands are constructed using list-based arguments, which is a recommended practice to minimize risks associated with shell interpolation.
External Configuration Retrieval: The migration process fetches the latest Bill of Materials (BOM) information from Azure's official GitHub repository and Maven Central. These resources are retrieved from well-known, trusted domains to ensure the agent uses authoritative and up-to-date dependency mappings.
Project File Permissions: The modernization scripts may attempt to modify file permissions (e.g., chmod +x) on Maven or Gradle wrappers (mvnw, gradlew). This is a standard operational step to ensure that the build environment remains functional across different platforms during the migration.
Refactoring Guardrails: The instructions include explicit rules to maintain security controls, such as preserving authentication patterns and authorization annotations when refactoring source code. It specifically directs the agent to replace legacy file-based authentication with modern, identity-based alternatives like DefaultAzureCredential to improve the project's security posture.

azure-upgrade