Skills azure-mgmt-botservice-py

📦

azure-mgmt-botservice-py

Name: azure-mgmt-botservice-py
Author: sickn33

Content revision r2 High Risk ⚡ Contains scripts⚙️ External commands🌐 Network access🔑 Env variables

Manage Azure Bot Service with Python

Azure Bot Service administration requires precise SDK models, authentication, and resource operations. This skill provides focused Python examples for bots, channels, keys, and OAuth connections.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "azure-mgmt-botservice-py" from https://skillstore.io/skills/sickn33-azure-mgmt-botservice-py.md and its manifest at https://skillstore.io/api/skills/sickn33-azure-mgmt-botservice-py/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-azure-mgmt-botservice-py.md Signed manifest GET /api/skills/sickn33-azure-mgmt-botservice-py/manifest Signed lockfile GET /api/skills/sickn33-azure-mgmt-botservice-py/lockfile

Test it

Using "azure-mgmt-botservice-py". List the bots in my resource group.

Expected outcome:

A read-only Python workflow authenticates to Azure, lists each bot, and reports its resource name and display name.

Using "azure-mgmt-botservice-py". Enable Direct Line for a development bot.

Expected outcome:

A channel configuration plan identifies the bot, creates an enabled Direct Line site, and keeps returned keys out of console output.

Using "azure-mgmt-botservice-py". Create a Microsoft Graph OAuth connection.

Expected outcome:

A connection workflow uses environment-based secret input, requests the User.Read scope, and summarizes the created connection without revealing credentials.

Security Audit

High Risk

v5 • 7/23/2026 Open versioned report

Most static findings are false positives caused by Markdown fences, inline code, parenthesized Python imports, placeholders, or expected environment-variable use. The example at SKILL.md line 242 prints a Direct Line key to standard output, creating a real credential disclosure risk. The skill also performs live Azure control-plane changes, including resource deletion, and requires explicit operator review.

Files scanned

331

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:242

Certificate/key files

print(f"Key: {site.key}")

Although the pattern label mentions certificate files, the example directly prints a Direct Line channel key. Logs or terminal history could disclose this usable credential.

Medium

SKILL.md:58-73 SKILL.md:112-128 SKILL.md:142-216 SKILL.md:256-269

Live Azure Control-Plane Mutations

Examples create, update, and delete Azure bot resources and enable channels. Execution against the wrong scope can alter or remove production resources.

The cited SDK calls explicitly create, update, delete, and configure Azure resources. The operational effect is direct and unambiguous.

Risk Factors

⚡ Contains scripts (4)

SKILL.md:136-140 SKILL.md:160-165 SKILL.md:192-197 SKILL.md:251-254

⚙️ External commands (46)

🌐 Network access (1)

SKILL.md:68

🔑 Env variables (4)

SKILL.md:37 SKILL.md:52 SKILL.md:55 SKILL.md:264

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-azure-mgmt-botservice-py/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-azure-mgmt-botservice-py/security.svg)](https://skillstore.io/skills/sickn33-azure-mgmt-botservice-py?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-azure-mgmt-botservice-py?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-azure-mgmt-botservice-py/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-azure-mgmt-botservice-py.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). azure-mgmt-botservice-py security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-azure-mgmt-botservice-py/audits/5

BibTeX citation

@techreport{sickn33-sickn33-azure-mgmt-botservice-py-2026,
  author = {sickn33},
  title = {azure-mgmt-botservice-py security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/sickn33-azure-mgmt-botservice-py/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-mgmt-botservice-py security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-azure-mgmt-botservice-py/audits/5"
identifiers:
  - type: other
    value: "skillstore:sickn33-azure-mgmt-botservice-py:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Provision a Development Bot

Create a free-tier bot and connect it to an existing application endpoint.

Configure Bot Channels

Enable Teams, Direct Line, or Web Chat with appropriate channel models.

Review Bot Inventory

List bots, channel settings, and OAuth connection names across an Azure scope.

Try These Prompts

Authenticate to Azure

Show how to create an Azure Bot Service client with DefaultAzureCredential and the AZURE_SUBSCRIPTION_ID environment variable.

Create a Bot Resource

Create an F0 Azure bot named [bot name] in [resource group] with endpoint [HTTPS endpoint]. Explain each required property.

Configure Production Channels

Prepare Python steps to enable [channel types] for [bot name]. Include prerequisite checks and avoid displaying channel keys.

Plan a Controlled Migration

Design a reviewed migration for [bot name] across [source scope] and [target scope]. Include inventory, changes, validation, rollback, and secret handling.

Best Practices

Confirm the subscription, resource group, and bot name before every write or delete operation.
Use DefaultAzureCredential, managed identities, Key Vault, and least-privilege Azure roles.
Redact channel keys and OAuth secrets from logs, terminal output, and generated responses.

Avoid

Do not run delete or channel-change examples against production without explicit approval.
Do not place application secrets, channel keys, or tenant credentials directly in prompts or source files.
Do not assume sample endpoints, SKUs, scopes, or SDK models match the target environment.

Frequently Asked Questions

Which Azure packages does this skill use?

It uses azure-mgmt-botservice for resource management and azure-identity for DefaultAzureCredential authentication.

Can this skill deploy my bot application?

No. It manages Bot Service resources and configuration, but it does not deploy application code or hosting infrastructure.

Which channels are covered?

The examples configure Microsoft Teams, Direct Line, and Web Chat. The reference table also identifies Slack, Facebook, and email channel classes.

Does it support bot deletion?

Yes. The skill includes a delete operation, which requires explicit confirmation and careful scope verification.

How should secrets be supplied?

Use managed identity or secure environment injection backed by Key Vault. Never include secret values in prompts, source files, or output.

Will the examples work with every SDK version?

Not necessarily. Confirm model names, method signatures, API support, and tenant policies for the installed Azure SDK version.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/azure-mgmt-botservice-py

Ref

f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526

Maintenance freshness

7/26/2026

Usage

6 downloads · 135 views

File structure

📄 SKILL.md