skilld
All skills
lukemurraynz avatar

/azure-sre-agent

@2cc2455
by Luke Murraylukemurraynz/hve-agent-skills1 stars
1

Design, configure, review, and operate production-grade Azure SRE Agent capabilities: response plans, scheduled tasks, HTTP triggers, custom agents, autonomous and review workflows, approval guardrails, AMBA observability, source RCA, connectors, MCP, governance hooks, WAF reviews, AI Foundry posture, Digital Native governance, postmortem generation, and KT discipline.

Ask your Agent

Use this Skill: https://skilld.dev/gh/lukemurraynz/hve-agent-skills/azure-sre-agent

This session only. Nothing lands on disk.

referencescapability-matrix.md

≈1.9k tokens on demand. Your agent reads this file only when SKILL.md points to it.

Capability Matrix

Use this matrix to compose or trim capabilities without editing the core skill.

Bundle Primary Capabilities Resource Types
../bundles/base-core baseline incident routing, diagnostics, remediation review, notification agents, response plans, scheduled tasks, hooks, checklist
../bundles/observability-amba AMBA baseline adoption, alert-to-response-plan mapping, alert tuning, policy compliance templates, checklists, scheduled tasks
../bundles/http-triggers-production CI/CD and event-driven SRE Agent invocation with security guardrails agents, HTTP triggers, checklist
../bundles/http-trigger-auth-bridges Azure Functions, Logic Apps, and API Management relay patterns for HTTP trigger auth bridging templates, checklist
../bundles/source-rca-remediation source-code RCA, deployment regression analysis, PR readiness agents, scheduled tasks, checklist
../bundles/pr-deployment-guard PR webhook-driven pre-merge deployment guard and staged risk assessment agent, HTTP trigger, templates, checklist
../bundles/knowledge-lifecycle post-incident knowledge capture, stale runbook review, known-error records scheduled tasks, templates, checklist
../bundles/security-identity managed identity, least privilege RBAC, OBO fallback, private network readiness roles, scheduled tasks, checklists
../bundles/operational-metrics quality score, success rate, TTM, AAU review, autonomy promotion templates, scheduled tasks
../bundles/azure-workload-production common workload response-plan seeds for App Service, Functions, SQL, Storage, APIM, Key Vault, edge/networking agent, response plans, scheduled task, template
../bundles/vm-cosmos-production PagerDuty-routed VM + Cosmos diagnostics and weekly resilience review agent, response plan, scheduled task, checklist
../bundles/aks-production AKS incident diagnostics and daily health monitoring agents, response plans, scheduled tasks
../bundles/containerapps-production Container Apps diagnostics and revision regression analysis agents, response plans, scheduled tasks
../bundles/drasi-aks-production Drasi lag/staleness triage and AKS-correlated diagnostics agents, response plans, scheduled tasks
../bundles/governance-kt approval gates, tool audit, KT completeness policy hooks
../bundles/tool-permissions-governance allow/ask/deny baseline and tool-permission drift governance policy template, scheduled task, checklist
../bundles/connectors-observability connector templates for GitHub/PagerDuty/Dynatrace/Grafana/Datadog/New Relic/Splunk/Elasticsearch/Hawkeye/AWS connectors
../bundles/connectors-collab-handoff Teams milestone updates, GitHub issue handoff, and draft PR readiness workflow agents, connectors, checklists
../bundles/incident-platforms IncidentPlatform templates for PagerDuty/ServiceNow and severity-based Review routing incident platforms, incident filters, checklist
../bundles/proactive-ops-governance recurring governance, capacity, and FinOps reviews inspired by community operations playbooks scheduled tasks, report template

Recommended Compositions

Minimal production baseline

  1. base-core
  2. security-identity
  3. governance-kt
  4. operational-metrics

AMBA-aligned observability baseline

  1. base-core
  2. observability-amba
  3. operational-metrics
  4. governance-kt

Event-driven CI/CD integration

  1. base-core
  2. http-triggers-production
  3. http-trigger-auth-bridges
  4. source-rca-remediation
  5. pr-deployment-guard
  6. security-identity
  7. governance-kt

Workload production factory

  1. base-core
  2. observability-amba
  3. azure-workload-production
  4. source-rca-remediation
  5. security-identity
  6. operational-metrics
  7. governance-kt

AKS production

  1. base-core
  2. observability-amba
  3. aks-production
  4. security-identity
  5. tool-permissions-governance
  6. governance-kt
  7. connectors-observability as needed
  8. connectors-collab-handoff for Teams + GitHub follow-up workflow

Container Apps production

  1. base-core
  2. observability-amba
  3. containerapps-production
  4. source-rca-remediation
  5. security-identity
  6. tool-permissions-governance
  7. governance-kt
  8. connectors-observability as needed
  9. connectors-collab-handoff for Teams + GitHub follow-up workflow

PagerDuty VM + Cosmos production

  1. base-core
  2. incident-platforms
  3. vm-cosmos-production
  4. connectors-observability
  5. tool-permissions-governance
  6. governance-kt

Proactive governance and FinOps cadence

  1. base-core
  2. security-identity
  3. operational-metrics
  4. proactive-ops-governance

Drasi on AKS

  1. base-core
  2. observability-amba
  3. aks-production
  4. drasi-aks-production
  5. security-identity
  6. operational-metrics
  7. governance-kt
  8. connectors-observability as needed

Source: SKILL.md on GitHub

Third-party checks

No alerts8d3 checks · Risk SAFE
  • Gen Agent Trust Hub8d

    The Azure SRE Agent skill provides a production-grade framework for managing Azure infrastructure using AI agents. It incorporates extensive safety documentation, approval-based hooks, and least-privilege role templates. The 'low' verdict is assigned due to the inherent risk of indirect prompt injection when the agent processes external incident data and source code, a necessary function for its SRE capabilities.

  • Socket8d

    No alerts

  • Snyk8d

    Risk: LOW · No issues

Provenance

Signed by skilld at 2cc2455. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub last month.

Steadyupdated last month

Capability

compatibility
Azure SRE Agent; GitHub Copilot agent skills; new projects only
Other metadata
metadata
{
  "last_verified": "2026-08-25",
  "version": "2.23.3",
  "risk": "critical",
  "last_updated": "2026-08-25"
}

README badge

README badge for lukemurraynz/hve-agent-skills/azure-sre-agent