Claude Skills by paulasilvatech

List, find, and show Azure resources across subscriptions or resource groups using Azure Resource Graph queries. Use when the user asks to list websites, web apps, app services, virtual machines, storage accounts, or container apps, asks what resources they have, wants a resource inventory, searches resources by tag, runs tag analysis, discovers orphaned resources or unattached disks, counts resources by type, or performs a cross-subscription lookup.

Analyze Azure resource groups and generate Mermaid architecture diagrams and markdown documentation for their resources and relationships. Use this skill when the user asks to diagram Azure resources, visualize a resource group, understand Azure architecture, map dependencies, or document resource relationships.

Terraform CLI operations manage Azure infrastructure as code through Terraform formatting, validation, initialization, planning, apply workflows, destroy workflows, state inspection, import workflows, module development, provider lock files, tfvars, and security scanning. Use this skill when working with terraform init, plan, apply, destroy, validate, fmt, state, import, or tfsec workflows.

Creates, repairs, and runs scoped Terratest coverage for Open Horizons Terraform modules under tests/terraform. Use when adding module tests, testing validation failures, selecting static or plan coverage, or running an explicitly approved Azure integration test with safe cleanup.

Import existing Azure resources into Terraform with Azure CLI discovery, dependency mapping, Azure Verified Modules, exact import addresses, and drift-safe plans. Use when asked to reverse-engineer live Azure infrastructure, generate IaC from subscriptions, resource groups, or ARM resource IDs, map dependencies, use AVM modules, or validate imported Terraform.

Build and query Kusto graphs from natural language, covering transient graphs with make-graph, persistent graph models and snapshots, pattern matching with graph-match, shortest paths, connected components, and graph-to-table export using edges-first construction. Use when the user works with make-graph, graph-match, graph-shortest-paths, graph-to-table, or graph-mark-components, builds a persistent graph model or snapshot, constructs a graph from data, finds paths between nodes, matches patt...

Apply IRQL graph functions to existing KQL or IRQL query results for Kusto Explorer visualization, generating Lift_To_Graph mappings and composing Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Use when the user supplies a query and wants Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing results, an icon-decorated graph, or folded graph nodes.

Compose Incident Response Query Language queries for Kusto cybersecurity investigations, translating natural language hunting questions into composable IRQL pipelines built from Get_*, Extract_*, and Enrich_* functions. Use when the user writes an IRQL query, runs a security or threat hunt in KQL, builds an incident response query or hunting pipeline, or investigates failed logins, phishing, lateral movement, process execution, or file creation events.

Query and analyze data in Azure Data Explorer with KQL for log analytics, telemetry, and time series analysis. Use when the user writes KQL queries, queries a Kusto database or ADX cluster, analyzes log analytics data, works with time series or IoT telemetry, or performs anomaly detection.

Troubleshoot and resolve issues with the Azure Messaging SDKs for Event Hubs and Service Bus, covering connection failures, authentication errors, message processing problems, and SDK configuration. Use when the user hits an Event Hubs or Service Bus SDK error, AMQP or connection failure, event processor host issue, lost or expired message lock, lock renewal problem, send timeout, disconnected receiver, checkpoint or offset issue, dead-letter or session error, duplicate events, or needs SDK l...

Performs database operations and health monitoring for Open Horizons platform data services. Use this skill when checking PostgreSQL health, validating connections, reviewing backup settings, monitoring database size or active sessions, checking migrations, or troubleshooting database behavior.

Design and operate Azure Storage services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake, covering object storage, SMB file shares, async messaging, NoSQL key-value data, big data analytics, access tiers, and lifecycle management. Use when the user asks about blob storage, file shares, queue or table storage, Data Lake, uploading files or downloading blobs, storage accounts, hot, cool, cold, or archive access tiers, tier comparison and selection, or storage l...

Design new Azure infrastructure or analyze existing Azure resources, generate interactive architecture diagrams, refine through conversation, produce Bicep, review, and deploy. Use when asked to design, analyze, modify, or deploy Azure architecture, including "Create X on Azure", "Set up a RAG architecture", "Analyze my current Azure infrastructure", "Draw a diagram for rg-xxx", Foundry slowness, cost reduction, security strengthening, Microsoft Foundry, AI Search, OpenAI, Fabric, ADLS Gen2, ...

Manage Azure Container Registry with az acr CLI commands for registries, images, cloud builds, ACR Tasks, authentication, tokens, geo-replication, networking, purge, import, and diagnostics. Use when working with ACR, az acr, pushing or importing container images in Azure, or Azure Container Registry operations.

Validate Azure Bicep deployments before execution with syntax checks, azd preview, Azure CLI what-if, validation-level fallback, permission checks, and a preflight report. Use this skill when the user asks before azd up, azd provision, az deployment, Bicep deployment, infrastructure review, permission verification, or what-if change preview.

Design, create, review, migrate, or troubleshoot Azure Developer CLI azd projects using azure.yaml, infra Bicep or Terraform, environments, secrets, hooks, deployment workflows, and azd-managed CI/CD. Use this skill when the user asks for azd project structure, Azure Developer CLI best practices, azd templates, or azure.yaml guidance.

Manage Azure DevOps with Azure CLI and the azure-devops extension. Use when the user asks for Azure DevOps CLI commands, az devops automation, projects, repos, pull requests, pipelines, builds, work items, artifacts, service endpoints, permissions, or CI/CD scripting.

Create, configure, run, and deploy Azure Static Web Apps with the SWA CLI. Use when asked to deploy a static site to Azure, run SWA locally, configure staticwebapp.config.json, add Azure Functions APIs, set API runtimes, database connections, or GitHub Actions CI/CD for Static Web Apps.

Select, explain, and apply cloud design patterns for distributed systems across reliability, performance, messaging, architecture, deployment, security, and event-driven categories. Use when designing, reviewing, or implementing cloud workloads and distributed system architectures.

Capture Azure Cosmos DB for NoSQL workload requirements and produce access-pattern-driven data model artifacts. Use when the user asks to design a Cosmos DB NoSQL model, choose containers and partition keys, document access patterns, analyze aggregates, or create cosmosdb_requirements.md and cosmosdb_data_model.md.

Update Azure Verified Modules (AVM) references in Bicep files by discovering avm/res modules, comparing MCR tag versions, reviewing breaking changes, editing versions and parameters, and validating with bicep lint and bicep build. Use when asked to update AVM modules in Bicep.

Run Azure compliance and security audits with azqr plus Key Vault expiration checks, covering best-practice assessment, resource review, policy and compliance validation, and security posture checks. Use when the user asks for a compliance scan or assessment, a security audit, Azure best-practice review, help before running the azqr CLI, Key Vault expiration checks, expired certificates or expiring secrets, or orphaned resource review.

Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities through Microsoft Graph, and configure OAuth 2.0 token exchange including fmi_path, on-behalf-of, and cross-tenant flows with the Microsoft Entra SDK for AgentID sidecar. Use when the user works on an Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent on-behalf-of flows, workload identity federation for agents, polyglot agent authentication, or Mic...

Guide Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. Use when the user wants to create or register an Entra ID application, configure OAuth, set up authentication, add API permissions, generate a service principal, review an MSAL or console app authentication example, or complete Entra ID tenant setup.

Check and manage Azure quotas and usage across resource providers for deployment planning, capacity validation, and region selection. Use when the user asks to check quotas, service limits, or current usage, request a quota increase, resolve a quota exceeded error, validate capacity, confirm regional availability or provisioning limits, or find how many vCPUs are available in a subscription.

Select the least-privilege Azure RBAC role for an identity, compare built-in and custom role options, and produce assignment commands or Bicep snippets. Use this skill when the user asks which Azure role to assign for permissions, scopes, identities, data-plane access, control-plane access, custom roles, or access requirements.

Perform an Azure Well-Architected Framework review of the current workload IaC and architecture, generating findings and GitHub issues for improvements. Use this skill when the user asks for azure well-architected review.

Set up AI Runway on AKS from a bare cluster to a running model, covering cluster verification, controller install, GPU assessment, provider setup, and the first deployment. Use when the user asks to set up or install AI Runway, onboard an AKS cluster, run AI Runway setup, deploy a model to AKS, enable GPU inference on AKS, configure KAITO on AKS, run an LLM or vLLM on AKS, set up model serving on AKS, or work with the AI Runway controller.

ArgoCD CLI operations manage GitOps installation, bootstrap, synchronization, drift detection, rollback checks, and day-2 application workflows. Use this skill when working with argocd login, app create, app sync, app health, ApplicationSet, ArgoCD troubleshooting, GitOps drift, or repository credential configuration.

Helm CLI operations manage Kubernetes packages, charts, releases, repositories, values, upgrades, rollbacks, template rendering, release history, chart debugging, and package validation. Use this skill when working with helm install, helm upgrade, helm rollback, helm repo add, helm template, values.yaml, or chart validation.

kubectl CLI operations inspect and manage AKS and Kubernetes resources directly, including health checks, manifests, rollout status, logs, events, namespaces, pod troubleshooting, service debugging, secrets inspection by name, and network policy validation. Use this skill when working with kubectl get, describe, logs, apply, diff, exec, top, or rollout workflows.

Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with verification. WHEN: deploy app to AKS, deploy to existing AKS cluster, containerize app for Kubernetes, generate K8s manifests for Azure, set up CI/CD for AKS, my AKS deployment is failing safeguard checks, I have a Django/Express/Spring Boot app to run...

Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility, identify incompatibilities, generate fixes, and guide migration from AKS Standard to AKS Automatic. Use when the user wants to migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess a cluster for Automatic compatibility, fix a deployment for Automatic, or identify AKS Automatic migration blockers.

Plan, create, and configure production-ready Azure Kubernetes Service clusters, covering the Day-0 checklist, Automatic versus Standard SKU selection, networking such as private API server, Azure CNI Overlay, and egress, security, and operations including autoscaling, upgrade strategy, and cost analysis. Use when the user wants to create or provision an AKS environment, enable AKS observability, design AKS networking, choose an AKS SKU, secure or optimize AKS, configure spot nodes or the clus...

Assess and migrate cross-cloud workloads to Azure with assessment reports and code conversion, supporting Lambda to Functions, Beanstalk, Heroku, and App Engine to App Service, and Fargate, Kubernetes, Cloud Run, or Spring Boot to Container Apps. Use when the user asks to migrate Lambda to Functions, move from AWS or GCP to Azure, migrate Beanstalk, Heroku, or App Engine, convert Cloud Run or Fargate workloads, move ECS, GKE, or EKS to Container Apps, or plan a cross-cloud migration.

Assess and upgrade Azure workloads between plans, tiers, or SKUs, and modernize Azure SDK dependencies in source code. Use when the user wants to upgrade Consumption to Flex Consumption, change an Azure Functions hosting plan or function app SKU, migrate App Service to Container Apps, modernize legacy Azure Java SDKs from com.microsoft.azure to com.azure, or migrate Azure Cache for Redis to Azure Managed Redis.

Instrument Azure-hosted web apps with Azure Application Insights telemetry by choosing auto-instrumentation or code instrumentation for ASP.NET Core, Node.js, or Python. Use when the user wants to enable telemetry, observe app health, create an App Insights resource, or wire instrumentation into a webapp.

Manage Azure cost by querying actual spend, forecasting future spending, and optimizing resources to reduce waste. Use when the user asks about Azure costs or bills, wants a cost breakdown, asks how much they are spending, wants to forecast spending, optimize or reduce spend, find orphaned resources, rightsize VMs, investigate a cost spike, or lower storage and AKS costs.

Debug Azure production issues with AppLens, Azure Monitor, resource health, and safe triage across App Service, Container Apps, Functions, AKS, virtual machines, and messaging. Use when the user needs to troubleshoot production incidents, high CPU or deployment failures, VM connectivity such as RDP, SSH, or blocked NSG rules, AKS problems such as pod pending, crashloop, node not ready, or image pull failures, cold starts, failing health probes, resource health, or Event Hubs and Service Bus S...

Deploys and operates Prometheus, Grafana, Loki, and Alertmanager for Open Horizons observability. Use this skill when deploying the monitoring stack, configuring dashboards, validating alert rules, checking metrics, reviewing SLO signals, or troubleshooting observability behavior.

Assess and improve the reliability posture of Azure Functions and Azure App Service workloads by scanning deployed resources for zone redundancy, ZRS storage, health probes, and multi-region failover, then driving staged remediation through CLI or infrastructure-as-code patches with user confirmation. Use when the user asks to assess or check reliability, review zone redundancy or multi-region failover, improve high availability or disaster recovery, find single points of failure, or evaluate...

Migrate a Backstage adopter app from the legacy frontend system to the new extension-based frontend system through hybrid and full-migration phases. Use when converting createApp, feature discovery, routes, sidebar, APIs, themes, or app-level frontend compatibility.

Migrate a Backstage app from the old frontend system to the new one. Use this skill when converting an app to use the new extension-based frontend system, including the hybrid migration phase and the full migration of routes, sidebar, plugins, APIs, themes, and other app-level concerns.

Install and use Backstage's AI catalog model for AiResource skills and rules plus mcp-server API entities, ownership, lifecycle, relationships, and source locations. Use when cataloging AI skills, governance rules, agents, or MCP servers.

Create or assess a standalone Backstage adopter application with version-aware prerequisites, package layout, first-run configuration, and baseline validation. Use when starting a Backstage app, reinstalling an app shell, or checking whether a repository is a valid adopter app.

Design, edit, validate, and troubleshoot Backstage app configuration, environment overlays, schemas, secrets, integrations, and frontend visibility. Use when working with app-config YAML, BACKSTAGE_ENV, config:check, deployment overrides, or configuration errors.

Configure, review, and troubleshoot Backstage sign-in, identity resolvers, auth providers, delegated third-party access, callbacks, and permissions. Use when setting up GitHub, Microsoft, guest, proxy, or custom auth providers or fixing login failures.

Run and compare the Backstage catalog query performance battery against a safe database replica, capture PostgreSQL plans and buffers, detect regressions, and update the baseline. Use when changing catalog queries, indexes, schemas, or database performance behavior.

Model, register, discover, validate, and troubleshoot Backstage Software Catalog entities, providers, processors, ownership, relations, locations, and lifecycle. Use when handling catalog-info YAML, entity ingestion, org discovery, duplicate entities, or catalog governance.

Prepare, implement, validate, and document contributions to backstage/backstage or a close fork using targeted tests, exact root typechecking, formatting, linting, API reports, changesets, DCO, and Apache headers. Use when changing Backstage core packages, plugins, docs, or contributor workflows.