# Send Azure to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "azure", "name": "Azure", "source": "tencent", "type": "skill", "category": "开发工具", "sourceUrl": "https://clawhub.ai/ivangdavila/azure", "canonicalUrl": "https://clawhub.ai/ivangdavila/azure", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/azure", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=azure", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "slug": "azure", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-30T07:58:10.585Z", "expiresAt": "2026-05-07T07:58:10.585Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=azure", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=azure", "contentDisposition": "attachment; filename=\"azure-1.0.0.zip\"", "redirectLocation": null, "bodySnippet": null, "slug": "azure" }, "scope": "item", "summary": "Item download looks usable.", "detail": "Yavira can redirect you to the upstream package for this item.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/azure" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/azure", "downloadUrl": "https://openagent3.xyz/downloads/azure", "agentUrl": "https://openagent3.xyz/skills/azure/agent", "manifestUrl": "https://openagent3.xyz/skills/azure/agent.json", "briefUrl": "https://openagent3.xyz/skills/azure/agent.md" } } ``` ## Documentation ### Cost Traps Stopped VMs still pay for attached disks and public IPs — deallocate fully with az vm deallocate not just stop from portal Premium SSD default on VM creation — switch to Standard SSD for dev/test, saves 50%+ Log Analytics workspace retention defaults to 30 days free, then charges per GB — set data retention policy and daily cap before production Bandwidth between regions is charged both ways — keep paired resources in same region, use Private Link for cross-region when needed Cosmos DB charges for provisioned RU/s even when idle — use serverless for bursty workloads or autoscale with minimum RU setting ### Security Rules Resource Groups don't provide network isolation — NSGs and Private Endpoints do. RG is for management, not security boundary Managed Identity eliminates secrets for Azure-to-Azure auth — use System Assigned for single-resource, User Assigned for shared identity Key Vault soft-delete enabled by default (90 days) — can't reuse vault name until purged, plan naming accordingly Azure AD conditional access policies don't apply to service principals — use App Registrations with certificate auth, not client secrets Private Endpoints don't automatically update DNS — configure Private DNS Zone and link to VNet or resolution fails ### Networking NSG rules evaluate by priority (lowest number first) — default rules at 65000+ always lose to custom rules Application Gateway v2 requires dedicated subnet — at least /24 recommended for autoscaling Azure Firewall premium SKU required for TLS inspection and IDPS — standard can't inspect encrypted traffic VNet peering is non-transitive — hub-and-spoke requires routes in each spoke, or use Azure Virtual WAN Service Endpoints expose entire service to VNet — Private Endpoints give private IP for specific resource instance ### Performance Azure Functions consumption plan has cold start — Premium plan with minimum instances for latency-sensitive Cosmos DB partition key choice is permanent and determines scale — can't change without recreating container App Service plan density: P1v3 handles ~10 slots, more causes resource contention — monitor CPU/memory per slot Azure Cache for Redis Standard tier has no SLA for replication — use Premium for persistence and clustering Blob storage hot tier for frequent access — cool has 30-day minimum, archive has 180-day and hours-long rehydration ### Monitoring Application Insights sampling kicks in at high volume — telemetry may miss intermittent errors, adjust MaxTelemetryItemsPerSecond Azure Monitor alert rules charge per metric tracked — consolidate metrics in Log Analytics for complex alerts Activity Log only shows control plane operations — diagnostic settings required for data plane (blob access, SQL queries) Alert action groups have rate limits — 1 SMS per 5 min, 1 voice call per 5 min, 100 emails per hour per group Log Analytics query timeout is 10 minutes — optimize queries with time filters first, then other predicates ### Infrastructure as Code ARM templates fail silently on some property changes — use what-if deployment mode to preview changes Terraform azurerm provider state contains secrets in plaintext — use remote backend with encryption (Azure Storage + customer key) Bicep is ARM's replacement — transpiles to ARM, better tooling, use for new projects Resource locks prevent accidental deletion but block some operations — CanNotDelete lock still allows modifications Azure Policy evaluates on resource creation and updates — existing non-compliant resources need remediation task ### Identity and Access RBAC role assignments take up to 30 minutes to propagate — pipeline may fail immediately after assignment Owner role can't manage role assignments if PIM requires approval — use separate User Access Administrator Service principal secret expiration defaults to 1 year — set calendar reminder or use certificate with longer validity Azure AD B2C is separate from Azure AD — different tenant, different APIs, different pricing ## Trust - Source: tencent - Verification: Indexed source record - Publisher: ivangdavila - Version: 1.0.0 ## Source health - Status: healthy - Item download looks usable. - Yavira can redirect you to the upstream package for this item. - Health scope: item - Reason: direct_download_ok - Checked at: 2026-04-30T07:58:10.585Z - Expires at: 2026-05-07T07:58:10.585Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/azure) - [Send to Agent page](https://openagent3.xyz/skills/azure/agent) - [JSON manifest](https://openagent3.xyz/skills/azure/agent.json) - [Markdown brief](https://openagent3.xyz/skills/azure/agent.md) - [Download page](https://openagent3.xyz/downloads/azure)