Azure skills and other cloud skills for Claude Code

Azure skills are the largest group in this category. Microsoft’s official plugin has 94 of them, and many are listed individually in our catalog. Cloud and DevOps skills teach an agent to plan, validate, deploy and diagnose workloads on a platform, usually by running that platform’s CLI against your account. We reviewed 37: 22 get an install verdict and 15 come with caveats.

The difference from other categories is blast radius. A design skill edits files in your project. A cloud skill can create resources, grant roles or deploy to production, and a mistake can cost money.

What to look for in Azure skills and other cloud skills

Look at the account first. Skills run az, azd, wrangler, firebase or gcloud as you, with whatever rights your login has. Use a least-privilege identity, a sandbox subscription or a separate project, and keep production access read-only until you trust the workflow. The Claude Code skills docs note that allowed-tools pre-approves tools for a turn and does not restrict others, and that your own permission settings still apply.

Check for plan-first design. The better Azure skills split preparing, validating and deploying so each step has a checkpoint. Check how the CLI is pinned: several skills here run npx tools at @latest. Check telemetry as well; the Azure MCP Server collects it by default and the README documents how to turn it off.

Of the 37 skills, 28 are marked “review” and 9 have broad access. None is clean, because every one runs commands against a live platform. The security page explains the labels.

Recommended cloud skills

• Azure Skills Plugin is Microsoft’s official plugin: 94 Azure skills plus the Azure MCP Server and Foundry MCP. It is MIT licensed with CI and about 40 eval files. We label it broad access. Scripts create resources, grant SQL roles and start privileged node debug sessions, and one PowerShell helper sends your Azure management token to a search host that is not management.azure.com. Use a least-privilege identity.
• azure-validate runs Bicep and Terraform checks, az deployment what-if and a Terraform plan before deploy. Its scripts are read-only apart from one azd setting. It pays off only with the prepare, validate, deploy trio.
• azure-diagnostics is the deepest troubleshooting skill in the pack, with 12 collection scripts and an evidence-only mode. One script opens a privileged node debug session.
• Cloudflare Skills has 19 official skills for Workers, Durable Objects, the Agents SDK and Cloudflare One, with an optional bundled MCP server. The turnstile-spin skill uses your CLOUDFLARE_API_TOKEN against api.cloudflare.com.
• Firebase Agent Skills are 13 official skills. Commands act on your signed-in Firebase account, and several run firebase-tools@latest through npx without pinning.

A broader pick is Google Agent Skills, about 180 skills across Google Cloud, Gemini APIs and Analytics. It is rated broad access: one skill fetches a catalog and further skill instructions at run time, and scripts use your gcloud credentials. Vercel’s agent skills are broad access too, because two review skills fetch rules from an unpinned GitHub branch.

For app data, see backend and databases. For audits of the code you deploy, see security skills. The category page lists all 37, and how we review explains the scoring.