azure-prepare Skill for Claude Code: Plan and Generate Azure Infrastructure
Plans an app's move to Azure and generates the azure.yaml, Bicep or Terraform, and Dockerfiles that the Azure Developer CLI needs.
- Installs
- 575.6K
- on skills.sh
- Stars
- 1.6K
- on GitHub
- Files
- 60+
- besides SKILL.md
- Updated
- Oct 2026
- last repo commit
azure-prepare is step one of the Azure deploy flow. Before any code it writes a .azure/deployment-plan.md in your workspace and asks you to approve it. After approval it generates the infrastructure files, hardens security, checks the app works, then hands off to azure-validate and azure-deploy.
It handles new apps, added services, updates and migrations. It does not run deployments. Its rules say never to delete your project folders and to ask before destructive actions. It uses Entra-only auth for SQL Server and never writes admin passwords into Bicep.
Good for
- Developers putting a new or existing app on Azure with azd
- Teams who want a reviewed plan before any infrastructure is created
- Developers converting between Bicep and Terraform templates
Install azure-prepare
Claude Code
- 1
Copy this prompt.
Install the azure-prepare skill in Claude Code. Run this command: /plugin install azure@claude-plugins-official Then check that it loaded and tell me how to use it.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Azure account, Node.js 18+, Azure CLI signed in (az login).
This installs the Azure plugin, which includes azure-prepare with the other Azure skills and the Azure MCP server. Sign in to azd with azd auth login if you plan to deploy. Update with /plugin update azure@claude-plugins-official.
From the project README. Source.
What's in the skill
When it loads
Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.
Sections in SKILL.md
- Triggers
- Rules
- ❌ PLAN-FIRST WORKFLOW — MANDATORY
- ❌ STEP 0: Specialized Technology Check — MANDATORY FIRST ACTION
- Check 1: Prompt keywords
- Phase 1: Planning (BLOCKING — Complete Before Any Execution)
- Phase 2: Execution (Only After Plan Approval)
- Outputs
- SDK Quick References
- Next
Key facts
- Author
- Microsoft
- Installs on skills.sh
- 575,576 (Nov 2, 2026)
- GitHub stars
- 1,609 (Nov 2, 2026)
- License
- MIT
- Last repo commit
- Oct 30, 2026
- Files next to SKILL.md
- 165 files
- skills.sh audits
- Gen Agent Trust Hub pass, Socket warn, Snyk pass
What it includes
Routes some prompts to other skills first, such as azure-cloud-migrate or azure-aigateway
Read ·
0. Specialized checkDecides whether the work is NEW, MODIFY or MODERNIZE
Files ·
1. Analyze workspaceClassification, scale and budget
2. Gather requirementsFinds components, technologies and dependencies
Files ·
3. Scan codebaseAZD (default), AZCLI, Bicep or Terraform
4. Select recipeMaps components to Azure services
5. Plan architectureWrites .azure/deployment-plan.md and waits for your approval
Write ·
6-7. Finalize and present planGenerates infra and config, hardens security, verifies, hands off to azure-validate
Runs code ·
Phase 2: Execute
From the official docs
Permissions
Medium risk
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only mode
Watch out for
It writes infrastructure and config files into your workspace
Work on a branch, read .azure/deployment-plan.md, and review infra/ before anything is deployed. github.com
It can delete files inside your project
The rules allow removing build artifacts, temp files and template Bicep replaced by Terraform, but never the project folder. Work on a branch so you can see every removal. github.com
It confirms your Azure subscription and region
It asks you to confirm these. Check the subscription name before you answer. github.com
skills.sh shows a Socket warning for this skill
Read the SKILL.md before you install if you must pass a security review. skills.sh
Technical details
| Talks to | Azure CLI, azd and the Azure MCP server |
|---|---|
| Scopes |
|
Questions
What does azure-prepare do?
It creates a deployment plan and the files needed to deploy your app to Azure with azd, then hands off to azure-validate and azure-deploy. It does not run the deploy.
How do I install azure-prepare?
Use the install box at the top and install the whole Azure plugin. The prepare, validate and deploy skills work as a set.
Does it wait for my approval?
Yes. The SKILL.md blocks any code generation until you approve the plan it presents.
Will it delete my project?
The rules forbid deleting your project or workspace directory and say to modify existing files when adding features. They do allow deleting files inside the project, such as build artifacts or template Bicep that Terraform replaced. Destructive actions require asking you first.
What do I need before using it?
An Azure account, Node.js 18+ and the Azure CLI signed in with az login. The README adds azd signed in for deployment workflows.
Is it safe?
It writes files into your workspace and runs azd and az commands that read your subscription. Work on a branch and read the plan. Skills.sh audits: Gen Agent Trust Hub pass, Socket warn, Snyk pass.
Information
updated Nov 2, 2026
- Repository
- microsoft/azure-skills
- Folder
skills/azure-prepare
Sources
Docs, issue trackers and discussions this page is built from.
Show all 3Hide
- Azure Skills README · github.com
- azure-prepare SKILL.md · github.com
- azure-prepare on skills.sh · skills.sh