Skill UI

This advanced skill automates the entire lifecycle of cloud infrastructure deployment. Instead of manual documentation review, it researches current best practices across multi-cloud platforms (AWS, GCP, Azure), synthesizes a coherent deployment strategy, and generates production-grade Infrastructure as Code (IaC). It outputs comprehensive artifacts, including Terraform modules, Kubernetes manifests, CI/CD pipelines, monitoring setups, and cost estimates, ensuring secure and optimized deployment.

A comprehensive guide for executing core Snowflake data loading workflows. This covers setting up stages (S3, GCS, Azure), defining file formats (CSV, JSON, Parquet), and using COPY INTO for bulk loading. It also details advanced continuous ingestion using Snowpipe, enabling real-time data synchronization from cloud storage into Snowflake tables.

This skill guides users through building comprehensive Smart City and IoT solutions on the Azure platform. It covers the entire solution lifecycle, from initial high-level requirements and defining city domains (e.g., traffic, energy) to designing robust, scalable architectures. Outputs include detailed reference architectures, security checklists, cost strategies, and phased implementation roadmaps for enterprise deployment.

This skill guides the end-to-end development, implementation, and validation of production-ready Python modules for Azure IoT Edge. It covers critical aspects including telemetry processing, protocol adaptation (Modbus, OPC-UA), local inference, and ensuring robust, secure edge-to-cloud messaging under variable network conditions.

This comprehensive playbook details expert techniques for exploiting Server-Side Request Forgery (SSRF). It covers bypassing URL filters, accessing cloud metadata endpoints (AWS, GCP, Azure), utilizing advanced protocols like Gopher, and chaining vulnerabilities to achieve Remote Code Execution (RCE) in real-world scenarios. Ideal for penetration testers and security researchers.

A comprehensive guide on embedding before-and-after screenshots directly into pull request descriptions. This skill helps reviewers visualize UI changes, layout adjustments, and data visualizations instantly, without needing to check out the branch. Includes best practices for image sizing, structured Markdown patterns, and specific API/upload guidance for Azure DevOps and GitHub.

Provides a comprehensive, step-by-step workflow for developers to integrate new Azure Backup commands into the Azure Backup MCP toolset. It covers the entire development lifecycle, including option definition, service implementation, command logic, command registration, input validation, writing unit tests, and executing live/recorded tests, ensuring high quality and adherence to best practices before PR submission.

This tool generates comprehensive weekly telemetry reports for the Azure Backup MCP toolset. It queries live production data from Kusto, performing advanced error analysis and classifying failures into three categories: Customer error, Azure Service failure, or MCP Tool Bug. The report correlates usage metrics with merged PRs and releases, producing an Outlook-compatible HTML summary for assessing tool health and stability.

This skill performs comprehensive governance auditing of Fabric and Power BI tenant settings. It compares current configurations against a defined baseline, surfaces critical configuration drift, enumerates delegated overrides at capacity, domain, or workspace scope, and investigates associated Entra security groups. It provides grounded, actionable intelligence for complex governance decisions.

This skill guides the architecture and implementation of SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers establishing seamless Single Sign-On (SSO) capabilities, eliminating the need for separate credentials and ensuring secure, cross-domain authentication for cloud applications.

Microsoft Entra PIM enforces Just-in-Time (JIT) access by replacing standing (permanent) privileges with time-bound, eligible assignments. This workflow mandates explicit role activation, justification, Multi-Factor Authentication (MFA), and optional approval workflows, significantly reducing the attack surface and ensuring adherence to Zero Trust principles for critical Azure and Entra roles.

A comprehensive guide for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically focusing on Microsoft Entra ID (Azure AD). This covers advanced threats like Primary Refresh Token (PRT) abuse, pass-the-cookie attacks, and Adversary-in-the-Middle (AitM) phishing. Use it for investigating anomalous sign-in behavior, configuring risk-based conditional access policies, and enforcing token protection to secure cloud identities.