$ loading_
Deploy prepared Azure apps with built-in recovery for common release errors.
The material indicates this skill is intended to execute Azure deployment commands, so it belongs to a deployment class that can trigger local command execution and cloud-side changes. However, it is also marked prompt-only, requires no secrets, has no declared remote endpoints, and points to an auditable GitHub source, so the overall posture is caution rather than high risk, with no clear red flags sufficient to elevate it to risk.
The material states that no keys or environment variables are required, and it does not ask the user to provide tokens, API keys, or other long-lived credentials; based on the provided facts, the direct credential exposure surface is low.
No remote endpoint is declared in the objective checks, and the material does not show data being sent to third-party services; while Azure deployment inherently may interact with Azure control-plane services, the current audit material does not list concrete egress destinations.
The description explicitly says it runs commands such as azd up, azd deploy, terraform apply, and az deployment. This is standard local execution capability for a deployment skill; it can trigger system commands and cloud resource changes, but no permissions beyond the stated purpose are evident.
The material requires reading .azure/deployment-plan.md, infrastructure files, and checklist documents within the project, which is ordinary project-scoped data access needed for deployment execution; there is no indication of broad access to unrelated local data or excessive system-level authorization.
The source points to a Microsoft GitHub repository and is open source, which is a meaningful positive signal for auditability. However, community adoption is listed as 0 stars, the license is undeclared, and maintenance status is unknown, so the supply-chain signals are incomplete and should be validated further before use.
Copy the install command and let the AI configure it · recommended for beginners
Please install the "azure-deploy" skill from askskill: 1. Download https://raw.githubusercontent.com/microsoft/GitHub-Copilot-for-Azure/main/plugin/skills/azure-deploy/SKILL.md 2. Save it as ~/.claude/skills/azure-deploy/SKILL.md 3. Reload skills and tell me it's ready
Using the existing .azure/deployment-plan.md and infrastructure files in this project, execute the Azure deployment flow. Prefer running azd up; if the environment already exists, use azd deploy instead, and automatically retry or suggest fixes on errors.
Executes the Azure deployment and returns results, key logs, failure causes, and recovery guidance.
The application is already prepared, so do not create a new resource plan. Directly run terraform apply with the existing Terraform configuration to deploy infrastructure to Azure, and handle recovery for permission, state lock, or configuration errors.
Runs the Terraform release and summarizes applied changes, resource status, and error-fix recommendations.
This project has already been validated. Publish it to the Azure production environment using the existing deployment plan and infrastructure files. Do not create a new application; if az deployment or Bicep deployment fails, continue with error recovery.
Provides production deployment results, a list of released resources, error-handling steps, and recommended follow-up checks.
AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE
PREREQUISITE: The azure-validate skill MUST be invoked and completed with status
ValidatedBEFORE executing this skill.
⛔ STOP — PREREQUISITE CHECK REQUIRED Before proceeding, verify BOTH prerequisites are met:
- azure-prepare was invoked and completed →
.azure/deployment-plan.mdexists- azure-validate was invoked and passed → plan status =
ValidatedIf EITHER is missing, STOP IMMEDIATELY:
- No plan? → Invoke azure-prepare skill first
- Status not
Validated? → Invoke azure-validate skill first⛔ DO NOT MANUALLY UPDATE THE PLAN STATUS
You are FORBIDDEN from changing the plan status to
Validatedyourself. Only the azure-validate skill is authorized to set this status after running actual validation checks. If you update the status without running validation, deployments will fail.DO NOT ASSUME the app is ready. DO NOT SKIP validation to save time. Skipping steps causes deployment failures. The complete workflow ensures success:
azure-prepare→azure-validate→azure-deploy
Activate this skill when user wants to:
azd up, azd deploy, or az deployment on a prepared projectScope: This skill executes deployments. It does not create applications, generate infrastructure code, or scaffold projects. For those tasks, use azure-prepare.
APIM / AI Gateway: Use this skill to deploy applications whose APIM/AI gateway infrastructure was already created during azure-prepare. For creating or changing APIM resources, see APIM deployment guide. For AI governance policies, invoke azure-aigateway skill.
.azure/deployment-plan.md must exist with status Validatedask_user — global-rulesazd up, azd deploy, terraform apply, and az deployment commands. These commands are run through this skill's error recovery and verification pipeline.| # | Action | Reference |
|---|---|---|
| 1 | Check Plan — Read .azure/deployment-plan.md, verify status = Validated AND Validation Proof section is populated | .azure/deployment-plan.md |
| 2 | Pre-Deploy Checklist — MUST complete ALL steps | Pre-Deploy Checklist |
| 3 | Load Recipe — Based on recipe.type in .azure/deployment-plan.md | recipes/README.md |
| 4 | RBAC Health Check — For Container Apps + ACR with managed identity: run azd provision --no-prompt, then verify AcrPull role has propagated before proceeding (see checklist) | Pre-Deploy Checklist — Container Apps RBAC |
| 5 | Execute Deploy — Follow recipe steps | Recipe README |
| 6 | Post-Deploy — Configure SQL managed identity and apply EF migrations if applicable | Post-Deployment |
| 7 | Handle Errors — See recipe's errors.md | — |
| 8 | Verify Success — Confirm deployment completed and endpoints are accessible | Verification |
…
Set up Entra ID app registration, OAuth, permissions, and MSAL integration.
Set up Azure Application Insights telemetry for web apps with best practices.
Troubleshoot Azure Event Hubs and Service Bus SDK connection and messaging issues.
Find, list, and inspect Azure resources across subscriptions and resource groups.
Deploy, evaluate, fine-tune, and optimize Microsoft Foundry agents and models.
Use Azure AI for search, speech, transcription, and OCR tasks.
Prepare Azure apps for deployment with infra, configs, and container setup.
Validate Azure deployment readiness across config, infrastructure, identities, and permissions.
Deploy Azure OpenAI models and find regional capacity intelligently.
Provides Azure skills and MCP configs for faster building, deployment, and integration.
Build and deploy a Power Apps code app to Power Platform.
Guide custom Azure OpenAI deployments with detailed model and capacity settings.