CtrlK
BlogDocsLog inGet started
Tessl Logo

azure-aigateway

Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbreak detection, add Azure OpenAI backend, add AI Foundry model, test AI gateway, LLM policies, configure AI backend, token metrics, AI cost control, convert API to MCP, import OpenAPI to gateway.

66

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

High

Do not use without reviewing

The canonical home for this skill is azure-aigateway in microsoft/GitHub-Copilot-for-Azure

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An exemplary overview-style SKILL.md: terse, command-driven, with a verified one-level-deep reference bundle and a working troubleshooting/feedback table. The main gaps are the redundant When-to-Use table and the absence of any inline executable content for the core policy-application workflow.

Suggestions

Drop or merge the 'When to Use This Skill' table with the frontmatter triggers it duplicates, saving ~10 lines of redundant body tokens.

Inline one minimal runnable policy snippet (e.g., token-limit + semantic-cache lookup) in 'Apply AI Governance Policy' so the core task is executable without a file hop, keeping the full combinations in policies.md.

Add an explicit checkpoint line after 'Add AI Backend' and the curl test (e.g., 'verify a 200 and backend list before layering policies') to make the existing validation steps sequential rather than implied.

DimensionReasoningScore

Conciseness

Lean body with no concept explanations — commands and tables dominate, and every section earns its place. Not a 5 because of redundancy: the 'When to Use This Skill' table repeats the frontmatter triggers almost verbatim, and the Quick Reference policy listing partially duplicates policies.md's own quick-decision table.

4 / 5

Actionability

Concrete, copy-paste-ready az and curl commands for gateway inspection, endpoint testing, and backend creation, with real flag values and JSON payloads. Not a 5 because the central 'Apply AI Governance Policy' task gives only an ordered intent list and defers entirely to references/policies.md, so the most common workflow has no inline executable artifact.

4 / 5

Workflow Clarity

Sequences are clear (discover → create backend → grant RBAC; a numbered policy placement order), with a 'Test AI Endpoint' verification command and a troubleshooting table mapping errors to fixes. Not a 5 because inline checkpoints are implicit — the body never states 'verify the backend list/curl succeeds before applying policies', and the full validated sequences live in patterns.md rather than the body.

4 / 5

Progressive Disclosure

Model progressive disclosure: a concise overview with every detailed policy, pattern, and SDK reference one level deep and clearly signaled, all linked paths and anchor targets verified to exist (policies.md, patterns.md, troubleshooting.md, four SDK quick-refs), organized by category with a navigation table. The single second-hop link (auth-best-practices.md from the SDK refs) is a supplementary detail, not a buried instruction chain.

5 / 5

Total

17

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with an explicit WHEN clause and dense, natural trigger coverage covering model, tool, and agent governance. Minor gaps: a few body trigger phrases and the 'APIM' synonym are missing, and the what-clause compresses many capabilities into one verb.

DimensionReasoningScore

Specificity

The what-clause 'Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents' names the domain, and the trigger list enumerates many concrete actions ('add Azure OpenAI backend', 'add AI Foundry model', 'test AI gateway', 'convert API to MCP', 'import OpenAPI to gateway'). Not a 5 because the capabilities surface only as trigger keywords rather than stated actions, and the what-clause relies on a single verb ('Configure') where the anchor-5 example lists multiple distinct capability verbs.

4 / 5

Completeness

Explicitly answers both what ('Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents') and when via a dedicated 'WHEN:' clause with 17 concrete trigger phrases. Clearly matches the anchor-5 example structure of capability statement plus explicit use-when triggers.

5 / 5

Trigger Term Quality

Strong natural-term coverage with good variation: 'token limit', 'token metrics', 'AI cost control', 'semantic caching', 'jailbreak detection', 'MCP rate limiting'. Not a 5 because a few natural phrases users would say are missing — the body's own trigger table has 'protect my tools', 'filter harmful content', and 'track token usage', and the common abbreviation 'APIM' is absent.

4 / 5

Distinctiveness Conflict Risk

The Azure APIM/AI Gateway framing is a clear niche, and most triggers ('semantic caching', 'MCP rate limiting', 'Azure OpenAI backend') are distinctive. Not a 5 because generic terms like 'load balancing', 'content safety', and 'LLM policies' could overlap with other Azure or general AI-governance skills.

4 / 5

Total

17

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 4 deeper-than-1-level

Warning

referenced_paths_exist

Referenced path issues: 4 deeper-than-1-level

Warning

Total

14

/

16

Passed

Repository
microsoft/azure-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.