Skills azure-hosted-copilot-sdk

📦

azure-hosted-copilot-sdk

Name: azure-hosted-copilot-sdk
Author: microsoft

Content revision r1 Safe 🌐 Network access📁 Filesystem access🔑 Env variables⚙️ External commands

Deploy Copilot SDK Apps on Azure

Teams need repeatable guidance for hosting Copilot SDK apps on Azure. This skill routes greenfield, existing app, and Azure model workflows.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "azure-hosted-copilot-sdk" from https://skillstore.io/skills/microsoft-azure-hosted-copilot-sdk.md and its manifest at https://skillstore.io/api/skills/microsoft-azure-hosted-copilot-sdk/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/microsoft-azure-hosted-copilot-sdk.md Signed manifest GET /api/skills/microsoft-azure-hosted-copilot-sdk/manifest Signed lockfile GET /api/skills/microsoft-azure-hosted-copilot-sdk/lockfile

Test it

Using "azure-hosted-copilot-sdk". I need a new Copilot SDK chat app hosted on Azure.

Expected outcome:

A route decision for greenfield setup, template scaffold steps, Azure validation steps, and a local test checklist.

Using "azure-hosted-copilot-sdk". Add Copilot SDK to my existing FastAPI app and use Azure OpenAI.

Expected outcome:

Project type detection and dependency guidance.
A route integration plan that keeps the existing server.
Azure BYOM settings, managed identity notes, and test steps.

Using "azure-hosted-copilot-sdk". Troubleshoot my BYOM timeout in Container Apps.

Expected outcome:

Checks for supported model family, token refresh, wire API setting, endpoint accuracy, deployment name, and gateway timeout settings.

Security Audit

Safe

v4 • 7/5/2026 Open versioned report

No evidence of malicious intent, prompt injection, credential exfiltration, or unsafe code execution was found. The static findings are documentation examples for Azure authentication, environment configuration, local testing, and CLI workflows.

Files scanned

403

Lines analyzed

Review items

False positives ignored

Risk Factors

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/microsoft-azure-hosted-copilot-sdk/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/microsoft-azure-hosted-copilot-sdk/security.svg)](https://skillstore.io/skills/microsoft-azure-hosted-copilot-sdk?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/microsoft-azure-hosted-copilot-sdk?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/microsoft-azure-hosted-copilot-sdk/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/microsoft-azure-hosted-copilot-sdk.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

microsoft. (2026). azure-hosted-copilot-sdk security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/microsoft-azure-hosted-copilot-sdk/audits/4

BibTeX citation

@techreport{microsoft-microsoft-azure-hosted-copilot-sdk-2026,
  author = {microsoft},
  title = {azure-hosted-copilot-sdk security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/microsoft-azure-hosted-copilot-sdk/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-hosted-copilot-sdk security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "microsoft"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/microsoft-azure-hosted-copilot-sdk/audits/4"
identifiers:
  - type: other
    value: "skillstore:microsoft-azure-hosted-copilot-sdk:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Scaffold a new Copilot SDK service

Create a new API, web UI, and Azure infrastructure from the service template.

Add Copilot SDK to an existing app

Add SDK routes, authentication, and tests without replacing the existing server structure.

Deploy with Azure BYOM

Configure Azure OpenAI or AI Foundry deployments with managed identity and supported model settings.

Try These Prompts

Start a new service

Use this skill to scaffold a new Copilot SDK service for Azure. Explain the files and commands before running them.

Integrate an existing app

Add Copilot SDK chat support to my existing app. Preserve my server structure and list the needed dependency, route, and test changes.

Configure Azure BYOM

Configure this Copilot SDK app for Azure BYOM. Use managed identity, supported model guidance, and fresh token handling.

Plan production deployment

Review my Copilot SDK app for Azure deployment. Produce an implementation plan covering infra, secrets, validation, and common failure modes.

Best Practices

Confirm before running azd, Docker, GitHub CLI, or cloud deployment commands.
Keep GitHub tokens in Key Vault or approved secret stores, never in prompts or logs.
Read target repository instructions and adapt the template instead of replacing existing structure.

Avoid

Running azd init inside an existing project root without a temporary scaffold.
Rewriting template infrastructure from memory instead of copying known template files.
Using unsupported BYOM models or a mismatched Azure API configuration.