Azure SRE Agent Proactive Operations Skills
Eight skills for Azure SRE Agent audit architecture, policy compliance, capacity and cost of a subscription and score it
- 70 ★ on the repository
- Last commit
Extended access
Why this level
- The skills read Azure subscription resources, policies and spend and run read-only az CLI commands and Kusto queries
- Reports contain configuration and cost data and output fix commands that you decide whether to apply
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/azure-sre-agent-proactive-operations-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The skills read Azure subscription resources, policies and spend and run read-only az CLI commands and Kusto queries
- Reports contain configuration and cost data and output fix commands that you decide whether to apply
This is third-party code. Review the repository files before installing.
What it does
The pack adds eight proactive skills to Azure SRE Agent: the agent excels at reacting to incidents, while regular posture checks are barely covered. The skills read subscription resources through the `az` CLI with read-only rights and Kusto queries and shape the result as a report with scores, maturity levels and priorities. The pack covers: a five-pillar Well-Architected Review with scoring, an audit of policy, RBAC, tags, locks and naming, capacity planning from quotas and growth, FinOps with waste detection and per-team chargeback, a blameless postmortem template using the five whys, Defender Secure Score monitoring with an improvement plan, a 15-check governance maturity score of 0 to 100 for startups and a 15-check Azure OpenAI and Foundry posture check on security, reliability and cost. Reports connect findings across domains, for example which fix to make first because it blocks the next ones. Findings come with ready-to-paste `az` commands. Each skill has a sample output, and runs can be scheduled. The pack was accepted into the official Azure SRE Agent plugin marketplace as Azure Proactive Operations.
Who it is for. Platform and SRE engineers on Azure who need regular security, cost and compliance checks without combing the portal by hand.
Good fit when
- Before a customer workshop you need a Well-Architected review with scores across five pillars
- Once a week the agent should check policies, tags, locks and access across subscriptions
- You need to know whether infrastructure can handle three times the traffic on Black Friday
- Once a month you need a cost report split by team with idle resources found
- After an incident you need a blameless postmortem fast from a five-whys template
Not a fit when
- You have no Azure SRE Agent: the skills are written for its format and tools
- You need a custom report for your stack: the checks are generic to Azure
- The tool should fix findings by itself: the skills read and output `az` commands and do not apply changes
- Subscription access lacks Reader: reading is enough but without it the checks cannot run
Example request
Run a Well-Architected review on my production subscription and show scores for the five pillars and the first three fixesLimitations
- Azure SRE Agent must be enabled and the Reader role granted on target subscriptions, plus Cost Management Reader for the cost skills.
- The author notes it is a community project and Microsoft does not maintain it: the skills were tested on a live agent but may need adjustments as the platform changes.
- Checks read state and output `az` commands for fixes; applying changes stays with you.
- The checks are generic: for a narrow company policy, customization is described in `docs/customization.md`.
How to disable. In the sre.azure.com portal open Builder, then Plugins, find Azure Proactive Operations and remove it. Skills can also be deleted one by one under Builder, then Skill builder. Scheduled runs are turned off in schedule settings.
FAQ
How do I install the skills?
Open sre.azure.com, pick your agent, then Builder, Plugins, Add marketplace and enter `Azure/sre-agent-plugins`. Install Azure Proactive Operations and verify the skills under Skill builder.
Which permissions are required?
At least Reader on the target subscriptions. The cost skills also need the Cost Management Reader role.
How is it different from Azure Advisor?
Advisor returns a flat list of per-resource recommendations. These skills build a scored, prioritized report, connect findings across domains, give ready `az` commands and run on a schedule.
Do the skills fix findings themselves?
No. They read state through the `az` CLI and Kusto queries and hand back fix commands that you paste.
How many checks does the Azure OpenAI and Foundry skill have?
Fifteen across security, reliability and cost with a Pass or Fail per check. It is skill number eight in the pack.
Discussion
No questions or reviews yet.
Related
SkillsMicrosoft Learn skills for nearly every Azure service: limits, configuration, security, architecture and troubleshooting with doc links
A Microsoft plugin with seven skills for Azure DevOps: backlog, work items, iterations, builds and security alerts.
Microsoft Agent Skills
Agent Skills
Official Microsoft skills that ground coding agents in Azure SDKs and Foundry for Python, .NET, TypeScript, Java and Rust
A collection of Copilot skills and agents for Azure, API Management, Terraform and diagrams, installed via the skills CLI or APM
A large base of DevOps, security, infrastructure and compliance skills for AI agents
Forty-five skills, custom agents and CloudFormation templates for AWS DevOps Agent: incident analysis and operations reviews
README in short
The README explains what the built-in Azure SRE Agent lacks and lists eight skills in a table with the value of each. Report examples, target roles, a comparison with Azure Advisor, prerequisites, marketplace install and sample prompts follow.
README badge
Original SKILL.md
---
name: well-architected-review
description: Run a Well-Architected Framework (WAF) review against Azure resources in scope. Use when asked about best practices, architecture review, WAF assessment, or pillar compliance (Reliability, Security, Cost, Operational Excellence, Performance Efficiency).
tools:
- RunAzCliReadCommands
- execute_kusto_query
---
# Well-Architected Review
## Purpose
Perform a structured assessment of Azure resources against the five pillars of the Microsoft Azure Well-Architected Framework. Produce a scored report with prioritized recommendations.
## When to use this skill
- User asks "are we following best practices?"
- User asks for a WAF or Well-Architected review
- User wants to assess architecture quality before a launch or audit
- Periodic (quarterly) architecture health check
## Pillars and checks
### 1. Reliability
Run the following checks and report findings:
1. **Availability design**: Check if critical workloads use availability zones or availability sets
```bash
az vm list --query "[].{name:name, zones:zones, availabilitySet:availabilitySet.id}" -o table
az appservice plan list --query "[].{name:name, zoneRedundant:zoneRedundant, sku:sku.name}" -o table
```
2. **Backup coverage**: Verify Recovery Services vaults and backup policies exist for VMs, databases, and file shares
```bash
az backup vault list -o table
```
Then for each vault:
```bash
az backup item list --vault-name <vault> --resource-group <rg> --backup-management-type AzureIaasVM -o table