Skills azure-mgmt-apimanagement-py
๐Ÿ“ฆ

azure-mgmt-apimanagement-py

Content revision r2 High Risk โšก Contains scriptsโš™๏ธ External commands๐ŸŒ Network access๐Ÿ”‘ Env variables

Automate Azure API Management with Python

Azure API Management configuration requires many SDK models and operation groups. This skill provides focused Python examples for common APIM administration workflows.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "azure-mgmt-apimanagement-py" from https://skillstore.io/skills/sickn33-azure-mgmt-apimanagement-py.md and its manifest at https://skillstore.io/api/skills/sickn33-azure-mgmt-apimanagement-py/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "azure-mgmt-apimanagement-py". List all APIs for the APIM service named orders-apim.

Expected outcome:

A concise workflow authenticates with DefaultAzureCredential, opens ApiManagementClient, lists service APIs, and reports each name, display name, and path.

Using "azure-mgmt-apimanagement-py". Create a premium product and attach the orders API.

Expected outcome:

The result outlines configurable product creation, API association, operation checks, and a warning to review publication and approval settings.

Using "azure-mgmt-apimanagement-py". Apply a rate limit of 100 requests per minute.

Expected outcome:

The result describes an API policy with a 100-call limit, a 60-second renewal period, and validation after policy deployment.

Security Audit

High Risk
v5 โ€ข 7/23/2026 Open versioned report

All 45 static findings are false positives caused by Markdown formatting, fixed Python imports, documented URLs, and expected Azure configuration access. However, the examples print a subscription key and embed a secret value, which can expose credentials when copied into real workflows.

1
Files scanned
287
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

High
Subscription Key Printed to Standard Output
The subscription example prints subscription.primary_key. This can expose an active APIM credential through terminal history, logs, or captured assistant output.
The example directly formats the returned primary subscription key into a print call, creating a clear credential disclosure path.
Medium
Secret Value Embedded in Example Source
The named-value example places a secret directly in source code. Users may replace the placeholder with a real secret that enters repositories or transcripts.
The literal is visibly a placeholder, but the demonstrated secret-handling pattern directly embeds the value in code.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-azure-mgmt-apimanagement-py/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-azure-mgmt-apimanagement-py/security.svg)](https://skillstore.io/skills/sickn33-azure-mgmt-apimanagement-py?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-azure-mgmt-apimanagement-py?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-azure-mgmt-apimanagement-py/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-azure-mgmt-apimanagement-py.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

sickn33. (2026). azure-mgmt-apimanagement-py security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-azure-mgmt-apimanagement-py/audits/5

BibTeX citation

@techreport{sickn33-sickn33-azure-mgmt-apimanagement-py-2026, author = {sickn33}, title = {azure-mgmt-apimanagement-py security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-azure-mgmt-apimanagement-py/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "azure-mgmt-apimanagement-py security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-23" url: "https://skillstore.io/skills/sickn33-azure-mgmt-apimanagement-py/audits/5" identifiers: - type: other value: "skillstore:sickn33-azure-mgmt-apimanagement-py:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
69
Community
91
Spec Compliance

What You Can Build

Build a First APIM Script

Authenticate with Azure, connect to an APIM service, and list existing APIs before making changes.

Automate API Product Setup

Create products, associate APIs, configure subscriptions, and establish repeatable access packaging.

Standardize API Controls

Import API definitions, configure backends, and apply consistent rate limits and headers.

Try These Prompts

Authenticate and List APIs
Using this skill, show Python authentication with DefaultAzureCredential and list APIs in {resource_group} and {service_name}. Explain each required input.
Create an API Product
Create Python SDK steps for an APIM product named {product_id}, attach {api_id}, and create an active subscription. Keep identifiers configurable.
Import and Protect an API
Import {openapi_url} into {service_name}, configure HTTPS, create {backend_url}, and apply a rate limit of {calls} requests per {period} seconds.
Design a Production Workflow
Design a production APIM workflow that provisions a service, imports an API, creates a product, applies policies, and validates every result. Include idempotency, retries, and rollback guidance.

Best Practices

  • Use managed identity or DefaultAzureCredential and grant only the Azure roles required for each operation.
  • Store secrets in Azure Key Vault or protected named values, and never print subscription keys.
  • Test changes in a nonproduction APIM instance and validate long-running operation results before promotion.

Avoid

  • Do not hardcode credentials, subscription keys, certificates, or backend secrets in generated scripts.
  • Do not run create-or-update examples against production without reviewing names, regions, SKU costs, and policy scope.
  • Do not assume examples provide retries, rollback, idempotency, or comprehensive input validation.

Frequently Asked Questions

Does this skill execute Azure changes automatically?
No. It provides guidance and examples. Running generated SDK code can create or modify Azure resources.
Which authentication method does it demonstrate?
It uses DefaultAzureCredential with a subscription identifier from the environment.
Can it import OpenAPI definitions?
Yes. It demonstrates imports from inline OpenAPI content and remote OpenAPI documents.
Can it manage APIM policies?
Yes. It shows an API-level XML policy with rate limiting and a custom response header.
What Azure permissions are required?
Permissions depend on each operation. Use an identity with the least role scope needed for the target APIM resources.
Are the examples production-ready?
No. Add validation, retries, idempotency, rollback, monitoring, and secure secret handling before production use.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526

Maintenance freshness

7/26/2026

Usage

5 downloads ยท 120 views

File structure

๐Ÿ“„ SKILL.md

More from sickn33

View all
View all