All skills
microsoft avatar

/azure-app-onboard

@b8a1c66
by microsoftmicrosoft/skills3.1k stars
351

End-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq).

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-app-onboard

This session only. Nothing lands on disk.

referencesintent-gathering.md

≈573 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Intent Gathering

Scope Triage (Step 2 — before prereq)

⛔ Scope triage — BEFORE prereq. Check for azd template markers (azure.yaml + IaC in infra/).

Skip triage when:

  • User explicitly asks for cost estimates, service recommendations, or code analysis
  • Empty workspace (prereq’s zero-code-path handles it)
  • Code exists but no infra files (no .bicep, .tf, azure.yaml, or infra/ dir) — full pipeline is the only sensible path
  • Intentionally vulnerable app signals (🛑 detection) — proceed to prereq directly

If azd template detected

⛔ You MUST read azd-template-routing.md for detection criteria, gate presentation, and routing protocol.

If NO azd template BUT infra files present

Ask ONE ask_user question:

  1. Yes — analyze and deploy end-to-end (Recommended)
  2. Just scaffold Bicep/Terraform
  3. Just deploy it (I have IaC ready)
  4. Other

Option 1 / vague → full pipeline (Step 3). Any other → invoke {"skill": "azure-prepare"}.

After Prereq Returns (Step 4 — scan-informed intent gathering)

Prereq has written prereq-output.json and context.json.components[] — this is the authoritative source for all downstream phases (prepare and scaffold consume context.json, not prereq-output.json).

Confirm the Azure target ("☁️ Azure target: {subscriptionName} ({subscriptionId})"). If the user wants a different subscription, write to context.json.overrides[].

Present scan results first, then ask only what prereq didn't answer (≤2 if mostly covered, ≤4 if gaps):

# Topic Ask if...
1 App purpose Not obvious from detectedStack + components[]
3 Data/storage Prereq didn't detect DB/compose
4 Auth approach No MSAL/passport/auth library detected
5 Scale Always — prereq doesn't know traffic expectations

⛔ Do NOT ask about stack/language (always answered by prereq) or budget (only if user mentioned cost). User corrections → context.json.overrides[]. Stop when covered or user says "just go."

Update intent: Merge scan results into context.json.intent. Set refinedFromScan: true and populate scanDiscoveredFacts[].

Source: SKILL.md on GitHub

No alerts3d3 checks · Risk SAFE
  • Gen Agent Trust Hub3d

    This skill provides a comprehensive end-to-end orchestrator for deploying applications to Azure. It incorporates several security-focused patterns, such as secrets management via Azure Key Vault, managed identity integration, and robust preflight validation. There are some security considerations, such as a surface for indirect prompt injection during workspace analysis and broad default firewall rules, but these are managed through explicit user approval gates and documented trade-offs.

  • Socket3d

    No alerts

  • Snyk3d

    Risk: LOW · No issues

Signed by skilld at b8a1c66. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week
metadata
{
  "author": "Microsoft",
  "version": "1.2.4"
}

README badge

README badge for microsoft/skills/azure-app-onboard