Claude Skills by paulasilvatech

Guide ongoing development of CopilotKit frontends connected over AG-UI to Microsoft Agent Framework agents and Azure AI Foundry hosted agents. Use when adding or gating tools, wiring human-in-the-loop approval, building generative UI, synchronizing shared state, debugging AG-UI event streams, upgrading preview packages, or deploying hosted agent updates.

Create, update, refactor, explain, or review Microsoft Agent Framework applications, agents, workflows, and migrations in .NET or Python. Use this skill when working with Microsoft Agent Framework, successor guidance for Semantic Kernel or AutoGen, Azure AI Foundry, Azure OpenAI, OpenAI providers, MCP tools, workflows, middleware, checkpointing, or language-specific samples.

Create, update, refactor, explain, or review Semantic Kernel applications, plugins, function-calling flows, and AI integrations in .NET or Python. Use when the user asks for Semantic Kernel implementation help, current SDK guidance, Azure OpenAI or Azure AI Foundry connector patterns, plugin design, or language-specific SK samples.

Assess whether source code is ready to deploy to Azure before any infrastructure work, evaluating build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Use when the user asks to evaluate a repository, check whether an app is ready or deployable to Azure, find deployment blockers, confirm dependency compatibility, ask whether Azure supports a framework, check whether a Dockerfile is needed, or determine what must change before deploying.

Orchestrate an app end to end from a business idea, app idea, or existing codebase to a running Azure deployment with cost estimates and a pre-deploy approval gate, auto-detecting Azure services, scaffolding infrastructure code, and deploying without a generic template. Use when the user wants to bring an app to Azure, plan an Azure deployment, learn what Azure services an app needs, check the cost to run it, deploy an app or all its services to the cloud, migrate an existing app to Azure, or...

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "p...

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up...

Scaffold a complete, production-ready Azure project from scratch for any use case, including RAG chatbots, multi-agent systems, API backends, data pipelines, Azure Functions, full-stack web apps, ML training and inference, and event-driven microservices. Use when the user wants to gather requirements through adaptive questioning and generate a full project structure with source files, Bicep infrastructure, azure.yaml for azd, Docker configuration, CI/CD workflows, a README with architecture d...

Run pre-deployment validation for Azure readiness with deep checks on configuration, Bicep or Terraform infrastructure, RBAC role assignments, managed identity permissions, and prerequisites. Use when the user wants to validate an app or azure.yaml, check deployment readiness, run preflight checks, verify configuration before deploying, validate Bicep, Azure Functions, or Container Apps deployments, review role assignments and managed identity permissions, run what-if analysis, or troubleshoo...

Analyze Azure IaC files and deployed Azure resources for evidence-based cost optimization, validate current costs, calculate priority scores, and draft GitHub issues. Use when asked to "azure cost optimize", "reduce Azure spend", "find Azure cost savings", "right-size Azure resources", or "create cost optimization issues".

Azure CLI operations run az commands for cloud resource discovery, subscription context, identity, AKS, ACR, Key Vault, RBAC, managed identity, and federated credential workflows. Use this skill when working with az login, az account, az aks, az acr, az keyvault, resource group checks, or Azure day-2 operations.

Route Azure virtual machine and scale set work, including size and image selection, pricing comparison, autoscale and orchestration modes, capacity reservation groups, and Essential Machine Management. Use when the user asks to create, provision, deploy, or spin up a VM, recommend a VM size or family, compare VM pricing, work with VMSS, scale sets, autoscale, burstable or GPU sizes, plan HPC, machine learning, or dev/test workloads, estimate compute cost, or reserve and guarantee capacity.

Architect and provision enterprise Azure infrastructure from workload descriptions for cloud architects and platform engineers, covering networking, identity, security, compliance, and multi-resource topologies with Well-Architected alignment, and generating Bicep or Terraform directly without azd. Use when the user asks to plan Azure infrastructure, architect a landing zone, design a hub-spoke network, plan a multi-region disaster recovery topology, set up virtual networks, firewalls, and pr...

Azure infrastructure patterns guide landing-zone, networking, identity, naming, tagging, and private connectivity decisions. Use this skill when designing hub-spoke networks, private endpoint patterns, Workload Identity, naming conventions, tag strategies, AKS architecture, Key Vault access, or secure PaaS topology.

Fetch live Azure Retail Prices API data and estimate Azure service, SKU, region, reservation, savings plan, spot, and Copilot Studio credit costs. Use when the user asks about Azure pricing, Azure costs, Azure billing, workload estimates, SKU comparison, Copilot Credits, Copilot Studio pricing, or agent usage estimation.

Analyze Azure resource health, logs, metrics, and telemetry to diagnose operational issues and produce a prioritized remediation plan. Use this skill when the user asks to troubleshoot an Azure resource, inspect Azure Resource Health, analyze Log Analytics or Application Insights data, classify root causes, or create Azure CLI remediation and rollback steps.

List, find, and show Azure resources across subscriptions or resource groups using Azure Resource Graph queries. Use when the user asks to list websites, web apps, app services, virtual machines, storage accounts, or container apps, asks what resources they have, wants a resource inventory, searches resources by tag, runs tag analysis, discovers orphaned resources or unattached disks, counts resources by type, or performs a cross-subscription lookup.

Analyze Azure resource groups and generate Mermaid architecture diagrams and markdown documentation for their resources and relationships. Use this skill when the user asks to diagram Azure resources, visualize a resource group, understand Azure architecture, map dependencies, or document resource relationships.

Terraform CLI operations manage Azure infrastructure as code through Terraform formatting, validation, initialization, planning, apply workflows, destroy workflows, state inspection, import workflows, module development, provider lock files, tfvars, and security scanning. Use this skill when working with terraform init, plan, apply, destroy, validate, fmt, state, import, or tfsec workflows.

Creates, repairs, and runs scoped Terratest coverage for Open Horizons Terraform modules under tests/terraform. Use when adding module tests, testing validation failures, selecting static or plan coverage, or running an explicitly approved Azure integration test with safe cleanup.

Import existing Azure resources into Terraform with Azure CLI discovery, dependency mapping, Azure Verified Modules, exact import addresses, and drift-safe plans. Use when asked to reverse-engineer live Azure infrastructure, generate IaC from subscriptions, resource groups, or ARM resource IDs, map dependencies, use AVM modules, or validate imported Terraform.

Build and query Kusto graphs from natural language, covering transient graphs with make-graph, persistent graph models and snapshots, pattern matching with graph-match, shortest paths, connected components, and graph-to-table export using edges-first construction. Use when the user works with make-graph, graph-match, graph-shortest-paths, graph-to-table, or graph-mark-components, builds a persistent graph model or snapshot, constructs a graph from data, finds paths between nodes, matches patt...

Apply IRQL graph functions to existing KQL or IRQL query results for Kusto Explorer visualization, generating Lift_To_Graph mappings and composing Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Use when the user supplies a query and wants Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing results, an icon-decorated graph, or folded graph nodes.

Compose Incident Response Query Language queries for Kusto cybersecurity investigations, translating natural language hunting questions into composable IRQL pipelines built from Get_*, Extract_*, and Enrich_* functions. Use when the user writes an IRQL query, runs a security or threat hunt in KQL, builds an incident response query or hunting pipeline, or investigates failed logins, phishing, lateral movement, process execution, or file creation events.

Query and analyze data in Azure Data Explorer with KQL for log analytics, telemetry, and time series analysis. Use when the user writes KQL queries, queries a Kusto database or ADX cluster, analyzes log analytics data, works with time series or IoT telemetry, or performs anomaly detection.

Troubleshoot and resolve issues with the Azure Messaging SDKs for Event Hubs and Service Bus, covering connection failures, authentication errors, message processing problems, and SDK configuration. Use when the user hits an Event Hubs or Service Bus SDK error, AMQP or connection failure, event processor host issue, lost or expired message lock, lock renewal problem, send timeout, disconnected receiver, checkpoint or offset issue, dead-letter or session error, duplicate events, or needs SDK l...

Performs database operations and health monitoring for Open Horizons platform data services. Use this skill when checking PostgreSQL health, validating connections, reviewing backup settings, monitoring database size or active sessions, checking migrations, or troubleshooting database behavior.

Design and operate Azure Storage services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake, covering object storage, SMB file shares, async messaging, NoSQL key-value data, big data analytics, access tiers, and lifecycle management. Use when the user asks about blob storage, file shares, queue or table storage, Data Lake, uploading files or downloading blobs, storage accounts, hot, cool, cold, or archive access tiers, tier comparison and selection, or storage l...

Design new Azure infrastructure or analyze existing Azure resources, generate interactive architecture diagrams, refine through conversation, produce Bicep, review, and deploy. Use when asked to design, analyze, modify, or deploy Azure architecture, including "Create X on Azure", "Set up a RAG architecture", "Analyze my current Azure infrastructure", "Draw a diagram for rg-xxx", Foundry slowness, cost reduction, security strengthening, Microsoft Foundry, AI Search, OpenAI, Fabric, ADLS Gen2, ...

Manage Azure Container Registry with az acr CLI commands for registries, images, cloud builds, ACR Tasks, authentication, tokens, geo-replication, networking, purge, import, and diagnostics. Use when working with ACR, az acr, pushing or importing container images in Azure, or Azure Container Registry operations.

Validate Azure Bicep deployments before execution with syntax checks, azd preview, Azure CLI what-if, validation-level fallback, permission checks, and a preflight report. Use this skill when the user asks before azd up, azd provision, az deployment, Bicep deployment, infrastructure review, permission verification, or what-if change preview.

Design, create, review, migrate, or troubleshoot Azure Developer CLI azd projects using azure.yaml, infra Bicep or Terraform, environments, secrets, hooks, deployment workflows, and azd-managed CI/CD. Use this skill when the user asks for azd project structure, Azure Developer CLI best practices, azd templates, or azure.yaml guidance.

Manage Azure DevOps with Azure CLI and the azure-devops extension. Use when the user asks for Azure DevOps CLI commands, az devops automation, projects, repos, pull requests, pipelines, builds, work items, artifacts, service endpoints, permissions, or CI/CD scripting.

Create, configure, run, and deploy Azure Static Web Apps with the SWA CLI. Use when asked to deploy a static site to Azure, run SWA locally, configure staticwebapp.config.json, add Azure Functions APIs, set API runtimes, database connections, or GitHub Actions CI/CD for Static Web Apps.

Select, explain, and apply cloud design patterns for distributed systems across reliability, performance, messaging, architecture, deployment, security, and event-driven categories. Use when designing, reviewing, or implementing cloud workloads and distributed system architectures.

Capture Azure Cosmos DB for NoSQL workload requirements and produce access-pattern-driven data model artifacts. Use when the user asks to design a Cosmos DB NoSQL model, choose containers and partition keys, document access patterns, analyze aggregates, or create cosmosdb_requirements.md and cosmosdb_data_model.md.

Update Azure Verified Modules (AVM) references in Bicep files by discovering avm/res modules, comparing MCR tag versions, reviewing breaking changes, editing versions and parameters, and validating with bicep lint and bicep build. Use when asked to update AVM modules in Bicep.

Run Azure compliance and security audits with azqr plus Key Vault expiration checks, covering best-practice assessment, resource review, policy and compliance validation, and security posture checks. Use when the user asks for a compliance scan or assessment, a security audit, Azure best-practice review, help before running the azqr CLI, Key Vault expiration checks, expired certificates or expiring secrets, or orphaned resource review.

Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities through Microsoft Graph, and configure OAuth 2.0 token exchange including fmi_path, on-behalf-of, and cross-tenant flows with the Microsoft Entra SDK for AgentID sidecar. Use when the user works on an Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent on-behalf-of flows, workload identity federation for agents, polyglot agent authentication, or Mic...

Guide Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. Use when the user wants to create or register an Entra ID application, configure OAuth, set up authentication, add API permissions, generate a service principal, review an MSAL or console app authentication example, or complete Entra ID tenant setup.

Check and manage Azure quotas and usage across resource providers for deployment planning, capacity validation, and region selection. Use when the user asks to check quotas, service limits, or current usage, request a quota increase, resolve a quota exceeded error, validate capacity, confirm regional availability or provisioning limits, or find how many vCPUs are available in a subscription.

Select the least-privilege Azure RBAC role for an identity, compare built-in and custom role options, and produce assignment commands or Bicep snippets. Use this skill when the user asks which Azure role to assign for permissions, scopes, identities, data-plane access, control-plane access, custom roles, or access requirements.

Perform an Azure Well-Architected Framework review of the current workload IaC and architecture, generating findings and GitHub issues for improvements. Use this skill when the user asks for azure well-architected review.

Set up AI Runway on AKS from a bare cluster to a running model, covering cluster verification, controller install, GPU assessment, provider setup, and the first deployment. Use when the user asks to set up or install AI Runway, onboard an AKS cluster, run AI Runway setup, deploy a model to AKS, enable GPU inference on AKS, configure KAITO on AKS, run an LLM or vLLM on AKS, set up model serving on AKS, or work with the AI Runway controller.

ArgoCD CLI operations manage GitOps installation, bootstrap, synchronization, drift detection, rollback checks, and day-2 application workflows. Use this skill when working with argocd login, app create, app sync, app health, ApplicationSet, ArgoCD troubleshooting, GitOps drift, or repository credential configuration.

Helm CLI operations manage Kubernetes packages, charts, releases, repositories, values, upgrades, rollbacks, template rendering, release history, chart debugging, and package validation. Use this skill when working with helm install, helm upgrade, helm rollback, helm repo add, helm template, values.yaml, or chart validation.

kubectl CLI operations inspect and manage AKS and Kubernetes resources directly, including health checks, manifests, rollout status, logs, events, namespaces, pod troubleshooting, service debugging, secrets inspection by name, and network policy validation. Use this skill when working with kubectl get, describe, logs, apply, diff, exec, top, or rollout workflows.

Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with verification. WHEN: deploy app to AKS, deploy to existing AKS cluster, containerize app for Kubernetes, generate K8s manifests for Azure, set up CI/CD for AKS, my AKS deployment is failing safeguard checks, I have a Django/Express/Spring Boot app to run...

Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility, identify incompatibilities, generate fixes, and guide migration from AKS Standard to AKS Automatic. Use when the user wants to migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess a cluster for Automatic compatibility, fix a deployment for Automatic, or identify AKS Automatic migration blockers.

Plan, create, and configure production-ready Azure Kubernetes Service clusters, covering the Day-0 checklist, Automatic versus Standard SKU selection, networking such as private API server, Azure CNI Overlay, and egress, security, and operations including autoscaling, upgrade strategy, and cost analysis. Use when the user wants to create or provision an AKS environment, enable AKS observability, design AKS networking, choose an AKS SKU, secure or optimize AKS, configure spot nodes or the clus...