Azure Infra

**Judgement:** A solid, practical Azure operations helper that wraps the local Azure CLI in a chat interface, well-suited for day-to-day inspection, auditing, and safe change planning across common Azure services. **Strengths & advantages** - Uses the local Azure CLI and the user’s existing login context, so it can interact with real subscriptions/resources under normal Azure RBAC. - Strong safety posture: defaults to read-only, requires explicit user confirmation for any write or destructive action, and prefers `--dry-run` where supported. - Broad coverage of common infra concerns: inventory, health/monitoring, security checks (RBAC, NSG, Key Vault exposure), and cost insights. - Encourages transparency by showing the exact CLI commands it plans to run and by clarifying which subscription is in scope. **Risks & limitations** - Still capable of performing destructive actions if the user explicitly requests and confirms them; misjudged confirmations can lead to deletion or misconfiguration of resources. - Depends on the correctness and availability of the local Azure CLI environment (login state, permissions, CLI version, network access). - Behavioral details (error handling, complex multi-tenant scenarios, advanced monitoring queries) are not fully visible from the metadata, so reliability in edge cases is uncertain. **Recommended scenarios** - Read-only inventory and auditing of Azure resources across one or more subscriptions. - Security posture checks (RBAC, NSG/public endpoints, Key Vault access) and preliminary compliance reviews. - Investigating performance/health via Azure Monitor metrics/logs and summarizing findings in chat. - Planning infrastructure changes by having the skill propose, but not immediately execute, Azure CLI commands for user review. **Less suitable for** - Fully automated or high-frequency change workflows where you want guaranteed non-interactive safety controls and strong guardrails against destructive operations. - Highly regulated environments that require formal change management, approvals, or detailed audit logs beyond what Azure and the local tooling natively provide.