CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

azure-enterprise-infra-planner

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

81%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured overview skill: the gated 7-phase workflow with validation, feedback loops, and explicit approval checkpoints is exemplary, and references are well organized with README indexes. The main improvements are removing the duplicated MCP tool listing, and flattening or trimming the deeper phase→resource reference chains.

Suggestions

Remove the redundant 'MCP tools' row from the Quick Reference table (or drop the separate MCP Tools table) so each tool list appears once, tightening conciseness.

Add one or two copy-paste-ready command examples in the body (e.g. a full 'az bicep build' or 'checkov' invocation with expected arguments) to raise inline actionability.

Link the most-used phase files or category indexes directly from SKILL.md's Quick Reference (as already done for resources/ and constraints/) so users of the skill can reach key material without traversing workflow.md → phases → category files.

DimensionReasoningScore

Conciseness

The body is an efficient overview that delegates detail to references and explains nothing Claude already knows, but it has minor trimmable redundancy: the MCP tool set appears in both the Quick Reference table and again as a dedicated MCP Tools table, and the Architecture prose restates gate conditions also depicted in the mermaid diagram. This fits 'efficient; minor instances of over-explanation that could be trimmed' rather than the lean 5 anchor where every token is non-redundant.

4 / 5

Actionability

Concrete elements are present — exact commands ('az bicep build', 'terraform validate', 'checkov'), named MCP tools with purposes, exact artifact paths ('<project-root>/.azure/insights.json', 'infra/main.bicep'), and an error table with specific fixes. It is not a 5 because the body itself is primarily orchestration: full executable steps live in workflow.md/phases, and no copy-paste-ready command invocations covering common cases are shown inline. It clearly exceeds the 3 anchor, which expects pseudocode or missing key details.

4 / 5

Workflow Clarity

The 7-phase pipeline is explicitly sequenced with per-phase gates (verified in workflow.md's phase table with gate conditions), an explicit feedback loop (validation errors loop back to Phase 6), user-approval gates at Phase 5 and a risk-acknowledged confirmation at Phase 7, and validation commands for the destructive deploy step. This matches the top anchor: clear sequence, explicit validation steps, feedback loops, and checklists for a complex process — no validation gap exists despite deployment being destructive.

5 / 5

Progressive Disclosure

SKILL.md is a clear overview with well-signaled links (workflow.md, schema.md, resources/README.md, constraints/README.md, all verified to exist), and each bundle area is indexed by READMEs. It is not a 5 because reference chains run deeper than one level (SKILL.md → workflow.md → phases/3-research-resources.md → resources/*.md), which exceeds the 'one-level-deep references' top anchor, though the direct README links from SKILL.md partially flatten navigation — hence above the 3 anchor's 'references present but not clearly signaled'.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: concrete capabilities, an explicit WHEN clause with seven natural trigger phrases, and active disambiguation against a sibling skill. The only notable gap is missing Terraform-oriented trigger terms and file extensions in the trigger list.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions — 'Architect and provision enterprise Azure infrastructure from workload descriptions', 'Generates Bicep or Terraform directly (no azd)' — and concretely scopes planning across 'networking, identity, security, compliance, and multi-resource topologies with WAF alignment'. Coverage is comprehensive for the skill's scope with no vague filler, matching the anchor for multiple specific concrete actions; it is not a 4 because no meaningful capability of the skill is left unnamed.

5 / 5

Completeness

It explicitly answers both 'what' ('Architect and provision enterprise Azure infrastructure... Generates Bicep or Terraform directly') and 'when' (a dedicated WHEN clause with concrete trigger phrases). This matches the anchor for clearly and explicitly answering both with concrete triggers; the 4 anchor's caveat of a less explicit 'when' does not apply.

5 / 5

Trigger Term Quality

The WHEN clause supplies seven natural, quotable trigger phrases users would actually say ('plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'set up VNets firewalls and private endpoints'). It falls short of the 5 anchor because a few natural terms and synonyms are missing — notably no Terraform-flavored trigger (e.g. 'generate Terraform for Azure') and no file extensions like .bicep/.tf.

4 / 5

Distinctiveness Conflict Risk

The niche is unambiguous — enterprise Azure infrastructure planning with distinct triggers (landing zone, hub-spoke, multi-region DR) — and it even disambiguates against a sibling skill ('PREFER azure-prepare FOR app-centric workflows'), minimizing wrong-skill triggering. This fits the clear-niche/minimal-conflict anchor rather than the 4 anchor's 'minor overlap risk with closely related skills'.

5 / 5

Total

19

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 2 deeper-than-1-level

Warning

referenced_paths_exist

Referenced path issues: 2 deeper-than-1-level

Warning

Total

14

/

16

Passed

Repository

microsoft/azure-skills

Path

.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.