Skills azure-resource-lookup
📦

azure-resource-lookup

Safe ⚙️ External commands

Discover Azure Resources

This skill helps Claude users find and list Azure resources across subscriptions using Azure Resource Graph queries. It generates KQL queries from natural language requests and provides reference patterns for common resource discovery scenarios.

Supports: Claude Codex Code(CC)
🥉 75 Bronze
1

Download the skill ZIP

2

Upload in Claude

Go to Settings → Capabilities → Skills → Upload skill

3

Toggle on and start using

Test it

Using "azure-resource-lookup". List all web apps in my subscription

Expected outcome:

  • Resource Name: mywebapp-prod
  • Type: microsoft.web/sites
  • Location: eastus
  • Resource Group: prod-rg
  • State: Running

Using "azure-resource-lookup". Find unattached disks

Expected outcome:

  • Unattached Disk: data-disk-01
  • Size: 50GB
  • Location: westus2
  • Resource Group: storage-rg

Security Audit

Safe
v1 • 2/22/2026

All 95 static findings are false positives. The skill contains documentation and reference content for Azure Resource Graph queries. The detected patterns are: (1) Backtick usage in markdown for code formatting - not actual shell execution; (2) KQL operators like '=~' misidentified as weak crypto - actually case-insensitive comparison; (3) Error handling references misidentified as reconnaissance. This is a legitimate Microsoft Azure documentation skill with no security concerns.

2
Files scanned
297
Lines analyzed
1
findings
1
Total audits

Risk Factors

⚙️ External commands (4)
references/azure-resource-graph.md:7-9 references/azure-resource-graph.md:9-13 SKILL.md:39 SKILL.md:40

Detected Patterns

False Positive: Backtick Usage in DocumentationFalse Positive: KQL Operator Misidentified as Weak CryptoFalse Positive: Error Handling Reference
Audited by: claude

Quality Score

41
Architecture
100
Maintainability
87
Content
50
Community
100
Security
91
Spec Compliance

What You Can Build

Cloud Administrators Managing Multiple Subscriptions

Get a complete inventory of resources across all subscriptions to understand the Azure footprint and identify unused resources.

Security Auditors Conducting Compliance Checks

Find resources missing required tags, with public network access enabled, or in failed provisioning states.

Developers Finding Specific Resource Types

Quickly locate container apps, web apps, or other resources when dedicated MCP tools are unavailable.

Try These Prompts

Basic Resource Listing 
List all virtual machines in my Azure subscription
Cross-Subscription Discovery 
Show me all storage accounts across all subscriptions I have access to
Orphaned Resource Detection 
Find unmanaged or orphaned disks that are not attached to any virtual machine
Tag Compliance Analysis 
Which Azure resources are missing the Environment tag? Show me the resource names and their resource groups

Best Practices

  • Always use case-insensitive type matching (=~) since Azure resource types are lowercase
  • Scope queries with --subscriptions or --first to avoid timeout in large tenants
  • Prefer dedicated MCP tools for single resource types when available

Avoid

  • Using ARG for real-time monitoring or alerting - data has delay
  • Attempting to create or update resources through this skill
  • Running broad queries without subscription scope in large tenants

Frequently Asked Questions

What is Azure Resource Graph?
Azure Resource Graph is an Azure service that provides efficient exploration of your Azure resources across subscriptions. It uses a KQL-like query language to provide fast queries at scale.
Does this skill require special Azure permissions?
Yes, you need at least Reader role on the subscriptions you want to query. The skill cannot access resources you don't have permission to view.
Can I deploy resources using this skill?
No, this skill is read-only. It only lists, finds, and shows Azure resources. For deployment, use the azure-deploy skill.
How is this different from individual Azure MCP tools?
Individual tools like compute, storage, or cosmos are optimized for specific resource types. This skill uses Azure Resource Graph for cross-resource queries and discovery when dedicated tools are unavailable.
Why do some queries return empty results?
Empty results usually mean no matching resources exist in your query scope. Check your subscription scope with --subscriptions flag and verify the resource type spelling.
Is the data in Azure Resource Graph real-time?
No, Azure Resource Graph data has a slight delay (typically a few minutes). For real-time monitoring, use Azure Monitor or resource-specific APIs.

Developer Details

Author

microsoft

License

MIT

Repository

https://github.com/microsoft/github-copilot-for-azure/tree/main/plugin/skills/azure-resource-lookup/

Ref

main

File structure

📁 references/

📄 azure-resource-graph.md

📄 SKILL.md