Azure Skills Plugin Claude skills

Microsoft's official plugin: 94 Azure skills plus the Azure MCP Server (200+ tools) and Foundry MCP for preparing, deploying, diagnosing and costing Azure workloads.

Our verdict Recommended

Official, MIT-licensed and well maintained, with workflows backed by real tooling; use a least-privilege Azure identity because the agent acts on live resources.

What Azure Skills Plugin does

The Azure Skills Plugin bundles three layers. The skills are workflows and decision guides for Azure work: azure-prepare, azure-validate and azure-deploy for building and shipping, azure-diagnostics and appinsights-instrumentation for troubleshooting, azure-compliance, azure-quotas and azure-rbac for governance, cost skills for analysis and optimization, AKS skills for troubleshooting and GPU inference, Kusto query skills, and AI skills including microsoft-foundry. The Azure MCP Server adds 200+ structured tools across 40+ Azure services so the agent can list resources, check prices, query logs and drive real workflows. A separate Foundry MCP server covers model discovery, deployment and agent workflows.

The 94 skills average 7.7 KB, many carry reference files (the AKS troubleshooting skill has 17), a few include scripts, and the repo has about 40 eval files and CI. The README says the repo is synced automatically from microsoft/GitHub-Copilot-for-Azure. Install paths include the APM tool, GitHub Copilot CLI and VS Code extensions, Claude Code (/plugin install azure@claude-plugins-official), Gemini CLI, Cursor, OpenCode and Codex.

You need an Azure subscription, Node.js 18+ (npx starts the MCP servers), the Azure CLI signed in with az login, and azd for deployment flows. The agent then acts on live resources with your credentials, so permissions matter.

Good for

  • Azure developers and platform teams who want an agent to follow Microsoft's workflows
  • AKS troubleshooting, cost analysis and compliance checks against real subscriptions
  • Teams deploying with azd who want validation steps before deploy

Not for

  • Projects on other clouds
  • Environments where an agent must not touch live Azure resources

What's inside depth 4/5

94 skills averaging 7.7 KB with reference folders in many, some scripts, CI, about 40 eval files and MCP servers for execution.

Skills
94
Reference docs
1785
Scripts
274
Tests / evals
128
Templates
252
Avg SKILL.md
7.5 KB

Counted from the repository file tree. How we score depth.

Dependencies and costs

  • An Azure account or subscription
  • Node.js 18+ (npx starts the MCP servers)
  • Azure CLI signed in with az login
  • Azure Developer CLI signed in with azd auth login for deployment flows
  • Telemetry: The Azure MCP Server collects telemetry by default; disable it with AZURE_MCP_COLLECT_TELEMETRY=false.

Security review

Broad access

This skill asks for more access than most, or sends data to another service. That is usually a design choice rather than bad intent, but you should know before you install it.

  • Pre-approves broad shell commandsFrontmatter of two Foundry sub-skill docs (this and resource/private-network/private-network.md line 5) lists unrestricted 'allowed-tools: Read, Write, Bash'; they are referenced docs rather than root SKILL.md files, so hosts may or may not honour them..github/plugins/azure-skills/skills/microsoft-foundry/project/create/create-foundry-project.md:7

Microsoft's Azure skills plugin: mostly guidance plus helper scripts that run az, azd, kubectl, terraform and Foundry fine-tuning against your own subscription, including steps that create resources, grant SQL roles to managed identities, start privileged node debug sessions and deploy models. The AKS packet-capture flow is gated by a written approval checklist and the README documents Azure MCP telemetry with an opt-out. One PowerShell helper sends your Azure management token to a non-management.azure.com Front Door search host, and the MCP configuration and some hooks were not in the files we could read.

Worth knowing

  • Relies on a CLI or package we could not reviewScripts depend on az, azd, kubectl, terraform, jq, sqlcmd and the Azure MCP Server, none of which are in the repository; terraform init and plan run in your infra directory..github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.sh:106
  • Installs packages or toolsInstalls the az rdbms-connect extension and runs 'dotnet tool install --global dotnet-ef'; check-and-setup-dependencies installs the azd microsoft.foundry extension; appinsights.ps1 adds the application-insights extension..github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.sh:56
  • Makes network requestsPython scripts call Azure Resource Manager and the user's own Foundry or Azure OpenAI endpoints with the user's Azure token or API key (deploy and delete models, upload training files, submit and cancel fine-tuning jobs)..github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/deploy_model.py:120
  • Needs an API key for its own serviceSends an Azure Resource Manager bearer token plus the search query to a Front Door host (PCNX-AI-etc5bra3fscchrew.b02.azurefd.net) that is not the management.azure.com audience the token was issued for; ownership of that host cannot be confirmed from the files..github/plugins/aks-skills/skills/azure-search-nav/references/Invoke-PortalSearchNav.ps1:179
  • Installs with curl | shReference doc tells the agent or user to install azd with 'curl -fsSL https://aka.ms/install-azd.sh | bash' (Microsoft short link; also in azure-prepare)..github/plugins/azure-skills/skills/azure-deploy/references/sdk/azd-deployment.md:8
  • Runs remote code at an unpinned versionDoc recommends running 'npx @upstash/context7-mcp@latest', a third-party MCP server at an unpinned version, for supplemental examples..github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/terraform.md:328
  • Sends usage data by default (can be turned off)README says the bundled Azure MCP Server collects telemetry and can be switched off with AZURE_MCP_COLLECT_TELEMETRY=false.README.md:361

What we checked

The repository (2308 files) on Oct 29, 2026. Not a full review: 1195 of 2308 files were not downloaded (large repository; we reviewed the skill folders); we read 61 of 126 code files; it relies on code outside the repository: Azure MCP Server and Foundry MCP, started through npx per the README; the plugin .mcp.json and plugin.json files are not in the files we have; aks-skills plugin hooks (hooks/claude-hooks.json, hooks/copilot-hooks.json) were not downloaded, so what they run is unknown; npm package @upstash/context7-mcp (suggested by azure-prepare docs).

NVIDIA SkillSpector static scan: 571 pattern hits (Privilege Escalation 285, Supply Chain 74, Excessive Agency 59, Tool Misuse 45, Data Exfiltration 36, MCP Rug Pull 19). The 571 SkillSpector hits are mostly documentation: .azure/ and kubeconfig path mentions, DELETE API examples, curl -k and hostNetwork/hostPath in the opt-in AKS capture Job, exec() of a user-supplied grader file in calibrate_grader.py (documented as trusted-input only) and an ARM token going to management.azure.com in deploy_model.py. A YARA 'backdoor_persistence' match on references/functions/triggers.md is the phrase 'root cause'. I found no hidden endpoints, obfuscation or credential exfiltration in the files I opened.

A review, not a certification. Skills change after we check them — read the files before installing.

License

MIT — commercial use allowed.

Can it run unattended?

Not really. Deploy and diagnose flows act on live Azure resources and expect a person to confirm plans and permissions.

Skills in this repository

SkillInstalls
microsoft-foundry582K
azure-diagnostics573K
azure-prepare572K
azure-ai571K
azure-deploy571K
azure-validate571K
azure-storage570K
azure-compliance570K
appinsights-instrumentation569K
azure-resource-lookup569K
azure-resource-visualizer569K
entra-app-registration569K
azure-kusto569K
azure-aigateway569K
azure-messaging560K
azure-compute525K
azure-cloud-migrate518K
azure-quotas474K
azure-upgrade467K
azure-enterprise-infra-planner443K
azure-kubernetes438K
azure-rbac397K
airunway-aks-setup363K
azure-cost363K
azure-hosted-copilot-sdk355K
entra-agent-id339K
azure-reliability302K
python-appservice-deploy233K
azure-app-onboard157K
azure-app-onboard-prereq157K
azure-cost-optimization155K
azure-observability86K

Linked skills have their own review.

Alternatives to Azure Skills Plugin

Cloudflare Skills

cloudflare/skills

Cloudflare's official 19-skill pack for building on Workers, Durable Objects, the Agents SDK, Cloudflare One and more, with an optional bundled MCP server.

Recommended Check first Depth 4/5

Google Agent Skills

google/skills

Google's official collection of about 180 skills for Google Cloud, Gemini APIs, Analytics, Data Manager, sign-in and other Google products.

Recommended Broad access Depth 3/5

Firebase Agent Skills

firebase/agent-skills

Google's 13 official Firebase skills: CLI and project setup, Auth, Firestore, Hosting, App Hosting, Data Connect, AI Logic and security rules.

Recommended Check first Depth 3/5

Vercel Agent Skills

vercel-labs/agent-skills

Vercel's official 9-skill pack: React and Next.js performance rules, composition patterns, UI and writing review, React Native, deploy and cost audit.

Recommended Broad access Depth 3/5

FAQ

What is the Azure Skills Plugin?

It is Microsoft's official plugin that gives coding agents Azure skills, the Azure MCP Server with 200+ tools, and a Foundry MCP server. It covers preparing, validating, deploying, diagnosing and optimizing Azure workloads.

How do I install the Azure Skills Plugin in Claude Code?

Run /plugin install azure@claude-plugins-official, or search for azure with /plugin. Beforehand sign in with az login, and with azd auth login if you will use deployment workflows; Node.js 18+ must be on your PATH.

Does the Azure Skills Plugin collect telemetry?

The Azure MCP Server collects telemetry by default. Set AZURE_MCP_COLLECT_TELEMETRY=false to turn it off.

Azure skills vs Cloudflare skills: which should I use?

They target different clouds. Pick Azure skills if you run on Azure and want MCP-backed access to live resources, and Cloudflare's skills if you build on Workers and the Cloudflare platform.

Sources: GitHub repository (stars, license, file tree, last push Oct 28, 2026); install counts from skills.sh via Best Skills (CC BY 4.0). Review based on the README and SKILL.md files as published.