Azure Resource Lookup (Azure Skills) skill

Microsoft skill for listing and finding Azure resources across subscriptions with Azure Resource Graph queries.

Our verdict Recommended

Small but practical: it fixes a real gap (no MCP list command for App Service) and teaches useful ARG patterns.

What the azure-resource-lookup skill does

azure-resource-lookup covers the inventory question: what do I have in Azure? Its SKILL.md sends prompts such as list my web apps, show storage accounts, find container apps, find orphaned disks or resources missing tags to Azure Resource Graph (ARG) instead of a long series of per-service calls. A quick-reference table names the KQL subset, the az graph query command, the resource-graph CLI extension and the extension_cli_generate MCP tool, and a routing table says when a dedicated MCP tool should be tried first. The skill warns that App Service has no dedicated list command, so website and web app requests must go through ARG. A single reference file collects query patterns for cross-subscription inventories, tag audits and orphaned resources such as unattached disks, idle IPs and unused NICs. It is read-only by design and explicitly excludes cost analysis and deployment changes, pointing to other skills for those. The pack is a 5.5 KB SKILL.md plus one reference document.

Good for

  • Inventorying resources across subscriptions or tags
  • Finding orphaned or failed resources
  • Answering 'list my web apps' style questions reliably

Not for

  • Cost optimization or deploying changes
  • Teams happy to run az graph queries themselves

Depth 2/5

5.5 KB SKILL.md and a single Resource Graph query reference, no scripts or evals.

Dependencies and costs

  • Azure account or subscription
  • Azure CLI signed in with az login
  • Azure MCP Server (installed with the plugin; needs Node.js 18+ for npx)
  • az CLI resource-graph extension (az extension add --name resource-graph)
  • Telemetry: The skill files contain no telemetry code. The Azure MCP Server that the plugin wires in has its own telemetry; the repo README says to disable it with AZURE_MCP_COLLECT_TELEMETRY=false.

Security review

Review before installing

A small read-only skill (SKILL.md plus one reference) that lists and finds Azure resources with Azure Resource Graph queries. It needs az signed in and runs the generated query commands in your shell.

Worth knowing

  • Relies on a CLI or package we could not reviewRuns 'az graph query' and Azure MCP tools to list resources across subscriptions..github/plugins/azure-skills/skills/azure-resource-lookup/SKILL.md:36
  • Installs packages or toolsTells you to run 'az extension add --name resource-graph'..github/plugins/azure-skills/skills/azure-resource-lookup/SKILL.md:37

What we checked

The skill folder (2 files) on Oct 29, 2026. Not a full review: it relies on code outside the repository: Azure CLI (az) and the az extensions it installs on demand; not part of the files we have; Azure MCP Server, started by the plugin through npx; its configuration sits outside this skill folder.

NVIDIA SkillSpector static scan: 1 pattern hits (Output Handling 1). One hit on 'Run the generated command': the skill asks the agent to run an az graph query generated by an MCP tool, which is read-only listing.

A review, not a certification. Skills change after we check them — read the files before installing.

License

MIT (declared in the SKILL.md frontmatter); the repo is a mirror synced from microsoft/GitHub-Copilot-for-Azure and has no top-level LICENSE file in our copy. Commercial use allowed under MIT.

Can it run unattended?

Not really. It answers interactive lookup questions and has no loop or verification structure.

Alternatives

Google Agent Skills

google/skills

Google's official collection of about 180 skills for Google Cloud, Gemini APIs, Analytics, Data Manager, sign-in and other Google products.

Recommended Broad access Depth 3/5

Cloudflare Skills

cloudflare/skills

Cloudflare's official 19-skill pack for building on Workers, Durable Objects, the Agents SDK, Cloudflare One and more, with an optional bundled MCP server.

Recommended Check first Depth 4/5

Firebase Agent Skills

firebase/agent-skills

Google's 13 official Firebase skills: CLI and project setup, Auth, Firestore, Hosting, App Hosting, Data Connect, AI Logic and security rules.

Recommended Check first Depth 3/5

FAQ

What does azure-resource-lookup do?

It helps an agent list and find Azure resources of any type across subscriptions and resource groups using Azure Resource Graph, including tag audits and orphaned-resource discovery.

Why does the skill use Azure Resource Graph?

ARG supports fast cross-subscription queries, and the skill notes there is no dedicated MCP list command for App Service or web apps, so those requests must go through ARG.

Can azure-resource-lookup change or delete resources?

No. It is built for read-only queries, and its description tells the agent to use azure-deploy for changes and a separate cost skill for cost questions.

How do I install azure-resource-lookup?

Install Microsoft's Azure plugin: /plugin install azure@claude-plugins-official in Claude Code, or add microsoft/azure-skills to the Codex marketplace, then az login.

Sources: GitHub repository; install counts from skills.sh via Best Skills (CC BY 4.0). Review based on the published SKILL.md.