Azure

multi-cloud-architecture helps design and compare AWS, Azure, GCP, and OCI architectures using service mappings and proven patterns like primary/DR, active-active, and portable platform baselines.

terraform-module-library helps teams design reusable Terraform modules for AWS, Azure, GCP, and OCI with a standard structure, examples, and tests for maintainable cloud architecture work.

The cost-optimization skill helps agents review AWS, Azure, GCP, and OCI spend with a practical framework for visibility, rightsizing, pricing models, architecture changes, and tagging standards.

The hybrid-cloud-networking skill guides secure on-prem to cloud connectivity planning, comparing VPN vs dedicated links like Direct Connect and ExpressRoute, with redundancy, routing, and failover tips. Use it as a hybrid-cloud-networking guide for deployment decisions.

The secrets-management skill helps teams secure CI/CD secrets with Vault, AWS Secrets Manager, Azure Key Vault, Google Secret Manager, and native platform options. Use it to plan runtime secret retrieval, rotation, and least-privilege Access Control for pipelines.

appinsights-instrumentation helps instrument Azure-hosted web apps with Application Insights. It guides App Service auto-instrumentation or manual ASP.NET Core and Node.js setup, including connection string and IaC updates.

baoyu-imagine is a multi-provider image generation skill with a typed CLI, mandatory EXTEND.md setup, reference image support, aspect ratio controls, and batch runs across OpenAI, Azure OpenAI, Google, OpenRouter, DashScope, MiniMax, Jimeng, Seedream, and Replicate.

detecting-azure-service-principal-abuse helps detect, investigate, and document suspicious Microsoft Entra ID service principal activity in Azure. Use it for Security Audit, cloud incident response, and threat hunting to review credential changes, admin consent abuse, role assignments, ownership paths, and sign-in anomalies.

detecting-azure-lateral-movement helps security analysts hunt lateral movement in Azure AD/Entra ID and Microsoft Sentinel using Microsoft Graph audit logs, sign-in telemetry, and KQL correlation. Use it for incident triage, detection engineering, and security audit workflows covering consent abuse, service principal misuse, token theft, and cross-tenant pivoting.

The configuring-hsm-for-key-storage skill explains HSM-backed key storage with PKCS#11, SoftHSM2, and production HSM options. Use this guide for install, usage, key attributes, token setup, signing, encryption, and Security Audit evidence.

analyzing-cloud-storage-access-patterns helps security teams detect suspicious cloud storage access in AWS S3, GCS, and Azure Blob Storage. It analyzes audit logs for bulk downloads, new source IPs, unusual API calls, bucket enumeration, after-hours access, and possible exfiltration using baseline and anomaly checks.

analyzing-azure-activity-logs-for-threats skill for querying Azure Monitor activity logs and sign-in logs to spot suspicious admin actions, impossible travel, privilege escalation, and resource tampering. Built for incident triage with KQL patterns, an execution path, and practical Azure log table guidance.

The azure-ai-vision-imageanalysis-py skill helps you install and use the Azure AI Vision Image Analysis SDK for Python. It covers captions, tags, objects, OCR, people detection, and smart cropping, with backend-focused setup, authentication, and environment guidance for Azure-based image understanding workflows.

azure-web-pubsub-ts helps backend and full-stack developers build real-time messaging with Azure Web PubSub in TypeScript and JavaScript. Use this azure-web-pubsub-ts guide for WebSocket-based chat, notifications, presence, pub/sub, authentication, and server-to-client delivery with the right SDK split and environment variables.

azure-storage-queue-ts is a practical skill for Azure Queue Storage in TypeScript and JavaScript. It helps backend developers send, receive, peek, and delete queue messages with the right auth, environment setup, and client types. Use it as a focused azure-storage-queue-ts guide for reliable message queue operations.

azure-storage-file-share-ts is the Azure File Share JavaScript/TypeScript skill for backend development with @azure/storage-file-share. Use it to create shares, manage directories, upload or download files, and handle file metadata with Azure Files SMB workflows. It is designed to reduce SDK setup and auth guesswork.

azure-storage-blob-ts is the Azure Blob Storage TypeScript/JavaScript skill for backend development. It helps you install the SDK, choose authentication, and implement upload, download, list, SAS, and streaming workflows with @azure/storage-blob.

azure-servicebus-ts is a TypeScript skill for Azure Service Bus messaging with @azure/service-bus and @azure/identity. Use it to build queue and topic workflows, send and receive messages, handle dead-letter cases, and follow reliable backend patterns. This azure-servicebus-ts guide is aimed at backend development.

azure-search-documents-ts helps backend developers build Azure AI Search solutions with the @azure/search-documents SDK. Use it for index creation, document upload, keyword, vector, hybrid, and semantic search, plus credential and environment setup. It is a practical azure-search-documents-ts guide for backend development.

azure-postgres-ts helps Node.js and TypeScript apps connect to Azure Database for PostgreSQL Flexible Server with pg. Use it for backend services, API routes, workers, pooling, transactions, and password or Microsoft Entra ID auth. This azure-postgres-ts skill is a practical azure-postgres-ts guide for backend development.

azure-monitor-opentelemetry-ts helps instrument Node.js apps with Azure Monitor and OpenTelemetry for distributed traces, metrics, and logs. Use this azure-monitor-opentelemetry-ts skill to install the package, set APPLICATIONINSIGHTS_CONNECTION_STRING, and follow the correct startup order for auto-instrumentation.

azure-keyvault-keys-ts helps you manage Azure Key Vault keys from TypeScript with @azure/keyvault-keys and @azure/identity. Use it to install the skill, set up auth and vault variables, and handle key creation, rotation, encrypt, decrypt, sign, verify, wrap, and unwrap for backend development.

azure-identity-ts helps TypeScript apps authenticate to Azure services with @azure/identity. Use this skill to choose the right credential for local development, production, CI/CD, managed identity, service principals, workload identity, or browser login. It is especially useful for Backend Development and clear azure-identity-ts guide workflows.

azure-eventhub-ts helps you build TypeScript services on Azure Event Hubs with @azure/event-hubs. Use it for backend development, event ingestion, consumer groups, checkpointing, and real-time pipelines. The azure-eventhub-ts skill guide focuses on install, auth, environment variables, and partition-aware processing.