/

/azure-sre-agent

by Luke Murraylukemurraynz/hve-agent-skills1 stars

Design, configure, review, and operate production-grade Azure SRE Agent capabilities: response plans, scheduled tasks, HTTP triggers, custom agents, autonomous and review workflows, approval guardrails, AMBA observability, source RCA, connectors, MCP, governance hooks, WAF reviews, AI Foundry posture, Digital Native governance, postmortem generation, and KT discipline.

192 files
464.9 KB
Updated last month
GitHub
No alerts

Ask your Agent

Use this Skill: https://skilld.dev/gh/lukemurraynz/hve-agent-skills/azure-sre-agent

This session only. Nothing lands on disk.

bundlesoperational-metricstemplatesautonomy-promotion-scorecard.md

1.1 KB raw

≈274 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Autonomy Promotion Scorecard

Response plan/task/trigger: @@PLAN_NAME@@
Service: @@SERVICE_NAME@@
Review period: @@REVIEW_PERIOD@@
Current mode: Review
Candidate mode: Autonomous

Evidence

Metric	Target	Observed
Success rate	`@@SUCCESS_RATE_TARGET@@`	`@@SUCCESS_RATE_OBSERVED@@`
Intent Met quality	`@@QUALITY_TARGET@@`	`@@QUALITY_OBSERVED@@`
Average TTM improvement	`@@TTM_TARGET@@`	`@@TTM_OBSERVED@@`
False-positive rate	`@@FALSE_POSITIVE_TARGET@@`	`@@FALSE_POSITIVE_OBSERVED@@`
Human approval rejection rate	`@@REJECTION_RATE_TARGET@@`	`@@REJECTION_RATE_OBSERVED@@`
AAU usage	`@@AAU_TARGET@@`	`@@AAU_OBSERVED@@`

Safety Gate

Blast radius is narrow and documented.
Mitigation is reversible or has safe roll-forward.
RBAC scope is minimal.
Approval history shows consistent acceptance.
Rollback validation has passed.
Owner accepts residual risk.

Decision

Promote / keep in Review / disable / redesign
Decision rationale:
Next review date:

Source: SKILL.md on GitHub

Third-party checks

No alerts8d3 checks · Risk SAFE

Gen Agent Trust Hub8d
The Azure SRE Agent skill provides a production-grade framework for managing Azure infrastructure using AI agents. It incorporates extensive safety documentation, approval-based hooks, and least-privilege role templates. The 'low' verdict is assigned due to the inherent risk of indirect prompt injection when the agent processes external incident data and source code, a necessary function for its SRE capabilities.
Socket8d
No alerts
Snyk8d
Risk: LOW · No issues

Provenance

Signed by skilld at 2cc2455. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub last month.

Steadyupdated last month

Capability

compatibility: Azure SRE Agent; GitHub Copilot agent skills; new projects only

Other metadata

metadata: { "last_verified": "2026-08-25", "version": "2.23.3", "risk": "critical", "last_updated": "2026-08-25" }