≈229 tokens on demand. Your agent reads this file only when SKILL.md points to it.
WAF Pre-Review Checklist
- Subscription scope and resource group list confirmed with workload owner.
- Accepted exceptions table provided or explicitly empty.
- Specific review pillar requested, or full five-pillar run confirmed.
- Reviewer has at least Reader role on target subscriptions (Cost Management Reader for cost pillar).
- Output channel confirmed (chat, Teams, or incident platform comment).
- Previous WAF review results available for trend comparison (optional).
Safety rules
- All checks use read-only tools (RunAzCliReadCommands, execute_kusto_query, Resource Graph).
- Remediation commands are suggestions only ; do not execute write operations.
- Validate every suggested az CLI command with GetAzCliHelp before outputting.
- Include the official MS Learn reference link with each finding.
- Flag cross-pillar dependencies explicitly (e.g., "fixing Security 2.2 also resolves Cost 3.1").