Skills azure-resource-lookup
๐Ÿ“ฆ

azure-resource-lookup

v0.0.0-placeholder Content revision r2 Safe โš™๏ธ External commands

Discover Azure Resources Across Subscriptions

Azure estates are difficult to inventory across subscriptions and resource types. This skill builds scoped, read-only Azure Resource Graph queries and presents focused results.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 76 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "azure-resource-lookup" from https://skillstore.io/skills/microsoft-azure-resource-lookup.md and its manifest at https://skillstore.io/api/skills/microsoft-azure-resource-lookup/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "azure-resource-lookup". List web apps in the production subscription.

Expected outcome:

  • Found 18 App Services across five resource groups.
  • The table includes each app name, state, location, resource group, and App Service plan.
  • Three apps are stopped.

Using "azure-resource-lookup". Count resources by type across two subscriptions.

Expected outcome:

  • The subscriptions contain 426 resources across 31 resource types.
  • Storage accounts, network interfaces, and managed disks are the largest categories.
  • Counts are grouped by subscription for comparison.

Using "azure-resource-lookup". Find resources missing the Environment tag.

Expected outcome:

  • Found 42 resources without the Environment tag.
  • Results are grouped by resource type and resource group.
  • No resource changes were made.

Security Audit

Safe
v5 โ€ข 7/23/2026 Open versioned report

Two findings are confirmed because the workflow generates and runs an Azure CLI command from user intent without an explicit validation or confirmation checkpoint. The other 29 detections are Markdown syntax, tool names, flags, or read-only examples, and no prompt injection or malicious intent was found.

3
Files scanned
301
Lines analyzed
2
Review items
0
False positives ignored
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
Use `extension_cli_generate` to build the `az graph query` command:
Line 73 directs the agent to generate an Azure CLI command from the user's request. Dynamic command generation can expand scope or introduce shell content unless the result is constrained and reviewed.
Medium
Ruby/shell backtick execution
Run the generated command. Use `--query` (JMESPath) to shape output:
Line 85 explicitly instructs the agent to run the generated command. Because the command derives from user intent and no validation checkpoint is specified, execution presents an external-command risk.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/microsoft-azure-resource-lookup/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/microsoft-azure-resource-lookup/security.svg)](https://skillstore.io/skills/microsoft-azure-resource-lookup?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/microsoft-azure-resource-lookup?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/microsoft-azure-resource-lookup/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/microsoft-azure-resource-lookup.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

microsoft. (2026). azure-resource-lookup security audit report (audit version 5) [Author version 0.0.0-placeholder]. Skillstore. https://skillstore.io/skills/microsoft-azure-resource-lookup/audits/5

BibTeX citation

@techreport{microsoft-microsoft-azure-resource-lookup-2026, author = {microsoft}, title = {azure-resource-lookup security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/microsoft-azure-resource-lookup/audits/5}, note = {Author version 0.0.0-placeholder} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "azure-resource-lookup security audit report (audit version 5)" version: "0.0.0-placeholder" type: report authors: - name: "microsoft" date-released: "2026-07-23" url: "https://skillstore.io/skills/microsoft-azure-resource-lookup/audits/5" identifiers: - type: other value: "skillstore:microsoft-azure-resource-lookup:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
41
Architecture
90
Maintainability
87
Content
69
Community
91
Spec Compliance

What You Can Build

Build a cloud inventory

List resources by type, location, subscription, and resource group for operational reviews.

Investigate resource health

Find failed provisioning states, unavailable resources, and active service incidents across selected subscriptions.

Audit tags and orphaned assets

Identify missing tags, unattached disks, unused public IP addresses, and orphaned network interfaces.

Try These Prompts

List web apps
List all Azure web apps in subscription [subscription]. Show name, resource group, location, state, and plan.
Summarize resource inventory
Count Azure resources by type across subscriptions [subscriptions]. Sort by highest count and identify the largest categories.
Check required tags
Find resources in [subscriptions] missing Environment or CostCenter tags. Group results by resource type and resource group.
Analyze orphaned resources
Find unattached disks, unused public IP addresses, and orphaned network interfaces in [subscriptions]. Use separate scoped queries and summarize deletion candidates.

Best Practices

  • Confirm the intended subscriptions and resource groups before running broad queries.
  • Use dedicated MCP tools for supported single-resource requests.
  • Limit result counts and project only fields needed for the decision.

Avoid

  • Do not run generated commands before reviewing their scope and arguments.
  • Do not use Azure Resource Graph for real-time monitoring or resource changes.
  • Do not treat orphaned-resource matches as deletion approval.

Frequently Asked Questions

What Azure access is required?
The user needs authenticated Azure access and read permission for every subscription or resource group included in the query.
Does this skill modify resources?
No. It uses read-only discovery workflows and does not deploy, update, or delete Azure resources.
Can it search multiple subscriptions?
Yes. Azure Resource Graph can query selected subscriptions when the authenticated identity has access.
How current are the results?
Azure Resource Graph is near real time, but indexed metadata can have a short delay.
Can it identify orphaned resources?
It identifies candidates from metadata patterns. Validate dependencies and ownership before taking deletion actions.
Does it provide cost optimization?
No. Use a dedicated Azure cost analysis workflow for pricing, savings, or optimization decisions.

Developer Details

Author

microsoft

License

MIT

Author version

v0.0.0-placeholder

Skillstore revision

r2

Ref

ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006

Maintenance freshness

7/25/2026

Usage

7 downloads ยท 154 views

File structure

๐Ÿ“ references/

๐Ÿ“„ azure-resource-graph.md

๐Ÿ“„ SKILL.md

๐Ÿ“„ version.json