Claude Skills by paulasilvatech

Manage Azure cost by querying actual spend, forecasting future spending, and optimizing resources to reduce waste. Use when the user asks about Azure costs or bills, wants a cost breakdown, asks how much they are spending, wants to forecast spending, optimize or reduce spend, find orphaned resources, rightsize VMs, investigate a cost spike, or lower storage and AKS costs.

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: \"run azd up\", \"run azd deploy\", \"execute deployment...

Validate Azure Bicep deployments before execution with syntax checks, azd preview, Azure CLI what-if, validation-level fallback, permission checks, and a preflight report. Use this skill when the user asks before azd up, azd provision, az deployment, Bicep deployment, infrastructure review, permission verification, or what-if change preview.

Design, create, review, migrate, or troubleshoot Azure Developer CLI azd projects using azure.yaml, infra Bicep or Terraform, environments, secrets, hooks, deployment workflows, and azd-managed CI/CD. Use this skill when the user asks for azd project structure, Azure Developer CLI best practices, azd templates, or azure.yaml guidance.

Manage Azure DevOps with Azure CLI and the azure-devops extension. Use when the user asks for Azure DevOps CLI commands, az devops automation, projects, repos, pull requests, pipelines, builds, work items, artifacts, service endpoints, permissions, or CI/CD scripting.

Debug Azure production issues with AppLens, Azure Monitor, resource health, and safe triage across App Service, Container Apps, Functions, AKS, virtual machines, and messaging. Use when the user needs to troubleshoot production incidents, high CPU or deployment failures, VM connectivity such as RDP, SSH, or blocked NSG rules, AKS problems such as pod pending, crashloop, node not ready, or image pull failures, cold starts, failing health probes, resource health, or Event Hubs and Service Bus S...

Creates and validates professional, accessible, editable draw.io diagrams with official Microsoft, Azure, and GitHub product or service icons plus recorded provenance. Use when generating or updating architecture, deployment, network, flow, sequence, ER, UML, trust-boundary, or branded product diagrams as self-contained .drawio source with optional SVG export.

Architect and provision enterprise Azure infrastructure from workload descriptions for cloud architects and platform engineers, covering networking, identity, security, compliance, and multi-resource topologies with Well-Architected alignment, and generating Bicep or Terraform directly without azd. Use when the user asks to plan Azure infrastructure, architect a landing zone, design a hub-spoke network, plan a multi-region disaster recovery topology, set up virtual networks, firewalls, and pr...

Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities through Microsoft Graph, and configure OAuth 2.0 token exchange including fmi_path, on-behalf-of, and cross-tenant flows with the Microsoft Entra SDK for AgentID sidecar. Use when the user works on an Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent on-behalf-of flows, workload identity federation for agents, polyglot agent authentication, or Mic...

Guide Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. Use when the user wants to create or register an Entra ID application, configure OAuth, set up authentication, add API permissions, generate a service principal, review an MSAL or console app authentication example, or complete Entra ID tenant setup.

Helm CLI operations manage Kubernetes packages, charts, releases, repositories, values, upgrades, rollbacks, template rendering, release history, chart debugging, and package validation. Use this skill when working with helm install, helm upgrade, helm rollback, helm repo add, helm template, values.yaml, or chart validation.

Azure infrastructure patterns guide landing-zone, networking, identity, naming, tagging, and private connectivity decisions. Use this skill when designing hub-spoke networks, private endpoint patterns, Workload Identity, naming conventions, tag strategies, AKS architecture, Key Vault access, or secure PaaS topology.

kubectl CLI operations inspect and manage AKS and Kubernetes resources directly, including health checks, manifests, rollout status, logs, events, namespaces, pod troubleshooting, service debugging, secrets inspection by name, and network policy validation. Use this skill when working with kubectl get, describe, logs, apply, diff, exec, top, or rollout workflows.

Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with verification. WHEN: deploy app to AKS, deploy to existing AKS cluster, containerize app for Kubernetes, generate K8s manifests for Azure, set up CI/CD for AKS, my AKS deployment is failing safeguard checks, I have a Django/Express/Spring Boot app to run...

Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility, identify incompatibilities, generate fixes, and guide migration from AKS Standard to AKS Automatic. Use when the user wants to migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess a cluster for Automatic compatibility, fix a deployment for Automatic, or identify AKS Automatic migration blockers.

Plan, create, and configure production-ready Azure Kubernetes Service clusters, covering the Day-0 checklist, Automatic versus Standard SKU selection, networking such as private API server, Azure CNI Overlay, and egress, security, and operations including autoscaling, upgrade strategy, and cost analysis. Use when the user wants to create or provision an AKS environment, enable AKS observability, design AKS networking, choose an AKS SKU, secure or optimize AKS, configure spot nodes or the clus...

Build and query Kusto graphs from natural language, covering transient graphs with make-graph, persistent graph models and snapshots, pattern matching with graph-match, shortest paths, connected components, and graph-to-table export using edges-first construction. Use when the user works with make-graph, graph-match, graph-shortest-paths, graph-to-table, or graph-mark-components, builds a persistent graph model or snapshot, constructs a graph from data, finds paths between nodes, matches patt...

Apply IRQL graph functions to existing KQL or IRQL query results for Kusto Explorer visualization, generating Lift_To_Graph mappings and composing Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Use when the user supplies a query and wants Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing results, an icon-decorated graph, or folded graph nodes.

Compose Incident Response Query Language queries for Kusto cybersecurity investigations, translating natural language hunting questions into composable IRQL pipelines built from Get_*, Extract_*, and Enrich_* functions. Use when the user writes an IRQL query, runs a security or threat hunt in KQL, builds an incident response query or hunting pipeline, or investigates failed logins, phishing, lateral movement, process execution, or file creation events.

Query and analyze data in Azure Data Explorer with KQL for log analytics, telemetry, and time series analysis. Use when the user writes KQL queries, queries a Kusto database or ADX cluster, analyzes log analytics data, works with time series or IoT telemetry, or performs anomaly detection.

Use when designing or provisioning Azure Managed Redis for cache, semantic cache, vector memory, session store, or agent memory in AI-native systems; produces SKU guidance, network and identity controls, Bicep deployment steps, and integration recommendations. DO NOT USE FOR: general agent architecture (use agentic-architecture-patterns), Foundry agent runtime design (use foundry-agent-blueprint), or general Azure infrastructure (use azure-infrastructure). Triggers include \"design Redis sema...

Troubleshoot and resolve issues with the Azure Messaging SDKs for Event Hubs and Service Bus, covering connection failures, authentication errors, message processing problems, and SDK configuration. Use when the user hits an Event Hubs or Service Bus SDK error, AMQP or connection failure, event processor host issue, lost or expired message lock, lock renewal problem, send timeout, disconnected receiver, checkpoint or offset issue, dead-letter or session error, duplicate events, or needs SDK l...

Deploys and operates Prometheus, Grafana, Loki, and Alertmanager for Open Horizons observability. Use this skill when deploying the monitoring stack, configuring dashboards, validating alert rules, checking metrics, reviewing SLO signals, or troubleshooting observability behavior.

Performs database operations and health monitoring for Open Horizons platform data services. Use this skill when checking PostgreSQL health, validating connections, reviewing backup settings, monitoring database size or active sessions, checking migrations, or troubleshooting database behavior.

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up...

Fetch live Azure Retail Prices API data and estimate Azure service, SKU, region, reservation, savings plan, spot, and Copilot Studio credit costs. Use when the user asks about Azure pricing, Azure costs, Azure billing, workload estimates, SKU comparison, Copilot Credits, Copilot Studio pricing, or agent usage estimation.

Check and manage Azure quotas and usage across resource providers for deployment planning, capacity validation, and region selection. Use when the user asks to check quotas, service limits, or current usage, request a quota increase, resolve a quota exceeded error, validate capacity, confirm regional availability or provisioning limits, or find how many vCPUs are available in a subscription.

Assess and improve the reliability posture of Azure Functions and Azure App Service workloads by scanning deployed resources for zone redundancy, ZRS storage, health probes, and multi-region failover, then driving staged remediation through CLI or infrastructure-as-code patches with user confirmation. Use when the user asks to assess or check reliability, review zone redundancy or multi-region failover, improve high availability or disaster recovery, find single points of failure, or evaluate...

Analyze Azure resource health, logs, metrics, and telemetry to diagnose operational issues and produce a prioritized remediation plan. Use this skill when the user asks to troubleshoot an Azure resource, inspect Azure Resource Health, analyze Log Analytics or Application Insights data, classify root causes, or create Azure CLI remediation and rollback steps.

List, find, and show Azure resources across subscriptions or resource groups using Azure Resource Graph queries. Use when the user asks to list websites, web apps, app services, virtual machines, storage accounts, or container apps, asks what resources they have, wants a resource inventory, searches resources by tag, runs tag analysis, discovers orphaned resources or unattached disks, counts resources by type, or performs a cross-subscription lookup.

Analyze Azure resource groups and generate Mermaid architecture diagrams and markdown documentation for their resources and relationships. Use this skill when the user asks to diagram Azure resources, visualize a resource group, understand Azure architecture, map dependencies, or document resource relationships.

Select the least-privilege Azure RBAC role for an identity, compare built-in and custom role options, and produce assignment commands or Bicep snippets. Use this skill when the user asks which Azure role to assign for permissions, scopes, identities, data-plane access, control-plane access, custom roles, or access requirements.

Scaffold a complete, production-ready Azure project from scratch for any use case, including RAG chatbots, multi-agent systems, API backends, data pipelines, Azure Functions, full-stack web apps, ML training and inference, and event-driven microservices. Use when the user wants to gather requirements through adaptive questioning and generate a full project structure with source files, Bicep infrastructure, azure.yaml for azd, Docker configuration, CI/CD workflows, a README with architecture d...

Design and plan end-to-end Azure IoT and Smart City solutions with requirements, architecture, device and edge strategy, ingestion, analytics, security, operations, cost controls, and phased delivery artifacts. Use when asked to build an IoT solution on Azure, design Smart City traffic, lighting, waste, water, energy, or public safety platforms, or create an urban IoT roadmap.

Create, configure, run, and deploy Azure Static Web Apps with the SWA CLI. Use when asked to deploy a static site to Azure, run SWA locally, configure staticwebapp.config.json, add Azure Functions APIs, set API runtimes, database connections, or GitHub Actions CI/CD for Static Web Apps.

Design and operate Azure Storage services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake, covering object storage, SMB file shares, async messaging, NoSQL key-value data, big data analytics, access tiers, and lifecycle management. Use when the user asks about blob storage, file shares, queue or table storage, Data Lake, uploading files or downloading blobs, storage accounts, hot, cool, cold, or archive access tiers, tier comparison and selection, or storage l...

Terraform CLI operations manage Azure infrastructure as code through Terraform formatting, validation, initialization, planning, apply workflows, destroy workflows, state inspection, import workflows, module development, provider lock files, tfvars, and security scanning. Use this skill when working with terraform init, plan, apply, destroy, validate, fmt, state, import, or tfsec workflows.

Creates, repairs, and runs scoped Terratest coverage for Open Horizons Terraform modules under tests/terraform. Use when adding module tests, testing validation failures, selecting static or plan coverage, or running an explicitly approved Azure integration test with safe cleanup.

Assess and upgrade Azure workloads between plans, tiers, or SKUs, and modernize Azure SDK dependencies in source code. Use when the user wants to upgrade Consumption to Flex Consumption, change an Azure Functions hosting plan or function app SKU, migrate App Service to Container Apps, modernize legacy Azure Java SDKs from com.microsoft.azure to com.azure, or migrate Azure Cache for Redis to Azure Managed Redis.

Run pre-deployment validation for Azure readiness with deep checks on configuration, Bicep or Terraform infrastructure, RBAC role assignments, managed identity permissions, and prerequisites. Use when the user wants to validate an app or azure.yaml, check deployment readiness, run preflight checks, verify configuration before deploying, validate Bicep, Azure Functions, or Container Apps deployments, review role assignments and managed identity permissions, run what-if analysis, or troubleshoo...

Perform an Azure Well-Architected Framework review of the current workload IaC and architecture, generating findings and GitHub issues for improvements. Use this skill when the user asks for azure well-architected review.

Plan, architect, scaffold, validate, and prepare custom Backstage plugins and modules using official Backstage documentation. Use when the user asks for new, legacy, or dual frontend plugins, backend plugins, backend modules, catalog processors, entity providers, scaffolder actions, search collators, auth providers, permission policies, TechDocs addons, common packages, node packages, plugin ADRs, architecture, validation, or community publication preparation.

Expert-level Windows batch file (.bat/.cmd) skill for writing, debugging, and maintaining CMD scripts. Use when asked to "create a batch file", "write a .bat script", "automate a Windows task", "CMD scripting", "batch automation", "scheduled task script", "Windows shell script", or when working with .bat/.cmd files in the workspace. Covers cmd.exe syntax, environment variables, control flow, string processing, error handling, and integration with system tools.

Read artifacts from a workshop bench where desks leave findings, verdicts, drafts, reports, journals, and cross-desk work products. Use this skill when starting a session, reviewing another desk's output, routing work, or answering "what's on the bench?".

Audit Python and BigQuery pipeline scripts for cost exposure, dry-run safety, bounded backfills, query pruning, idempotent writes, and observability. Use this skill when reviewing client.query, load_table_from_*, extract_table, copy_table, DDL/DML query jobs, external API calls, LLM calls, or storage writes before production use.

Refine a rough task request into a high-quality markdown prompt by clarifying scope, deliverables, constraints, context, and success criteria, then copy the final prompt to the clipboard with Joyride. Use when the user asks to improve, boost, rewrite, or polish a prompt without writing code. Requires Joyride.

Turn vague work-history prompts into evidence-backed impact statements for performance reviews, self-reviews, promotion packets, weekly updates, status reports, and accomplishments. Use when the user says "brag", "what did I do", "backfill my work history", "review prep", "what did I ship", "track my wins", or documenting engineering impact from Copilot CLI sessions, git commits, and GitHub PRs.

Create a high-level epic architecture specification from an Epic PRD, including system diagrams, technical enablers, stack choices, technical value, and t-shirt sizing. Use when asked to write an epic architecture spec, turn a PRD into architecture, or produce docs/ways-of-work arch.md.

Create an Epic Product Requirements Document (PRD) from a high-level epic idea, including goal, personas, journeys, business requirements, success metrics, scope boundaries, and business value. Use when asked to write an epic PRD or docs/ways-of-work epic.md.

Create detailed feature implementation plans from a Feature PRD for an Epoch-style monorepo, including architecture, database schema, API design, frontend structure, security, performance, and deployment considerations. Use this skill when the user asks for a feature implementation plan, feature breakdown, PRD-to-plan conversion, or implementation-plan.md.