The Agent Skills Directory

Strong Authentication Standards: The skill enforces Microsoft Entra ID and Managed Identities as the default authentication mechanism. It includes explicit prohibitions against generating Bicep templates with hardcoded admin passwords for SQL databases, significantly reducing the risk of credential exposure.\n- Trusted External Sources: All software installation commands and template fetch operations target well-known Microsoft-owned domains (e.g., aka.ms, mcr.microsoft.com, cdn.functions.azure.com). The use of curl | bash for CLI installation is used as intended pointing to an official vendor script.\n- Safe Execution Patterns: Scripts provided for SQL data-plane access are designed with safety in mind, using structured environment parsing instead of patterns like eval on CLI output.\n- Transparency through Planning: The mandatory requirement to create a .azure/deployment-plan.md file before generating code ensures that users can review and approve infrastructure decisions, service mapping, and resource choices before any execution occurs.\n- Automated Security Best Practices: The skill automatically incorporates security hardening steps such as enabling TLS 1.2+, configuring Private Endpoints, and setting up Key Vault for secret management as part of its generation logic.

azure-prepare