azure-infra

What This Skill Does

The azure-infra skill serves as your intelligent interface for managing Microsoft Azure environments directly through OpenClaw. By leveraging the Azure CLI, this skill enables you to query, audit, and monitor your cloud infrastructure without leaving your terminal context. It acts as an expert sysadmin assistant, capable of interpreting resource states, inspecting logs, checking RBAC configurations, and analyzing cost management data. The tool is designed with a 'safety-first' architecture, ensuring that it operates in a read-only capacity by default, and mandates explicit human intervention for any command that could result in modification or deletion of resources.

Installation

To integrate this skill into your environment, use the OpenClaw package manager: clawhub install openclaw/skills/skills/bmdhodl/azure-infra Ensure you have the Azure CLI installed locally and authenticated via az login --use-device-code before initiating tasks. The skill will automatically detect your active subscription, though you can override this by explicitly naming your target subscription or tenant in your prompt.

Use Cases

• Cloud Auditing: Automatically audit your network security groups (NSGs) for overly permissive rules, or check if storage accounts are exposed to the public internet.
• Performance Monitoring: Retrieve and summarize Azure Monitor metrics to diagnose latency or error spikes in App Services or Kubernetes (AKS) clusters.
• Cost Governance: Query Cost Management APIs to identify expensive resources and receive reports on monthly spending trends.
• Deployment Support: Retrieve details about existing VMs, databases, and Functions, or get status updates on long-running deployments.

Example Prompts

1. "List all virtual machines in the production resource group and show their current power state."
2. "Identify any storage accounts in the current subscription that allow public access and suggest the command to secure them."
3. "Check the last 30 days of cost trends for the 'web-app' resource and summarize which services are contributing most to the bill."

Tips & Limitations

• Safety Protocols: Always rely on the provided --dry-run output before executing changes. The skill is strictly enforced to prevent accidental destructive actions.
• Secret Masking: The skill automatically scrubs sensitive data. Never paste raw connection strings or secrets into the chat interface.
• Context Awareness: If you are working across multiple subscriptions, always prefix your request with the specific subscription ID to avoid unintended read operations.