30-SECOND BRIEF
What it does—and when it fits
Azure Validate is the mandatory pre-deployment gate between Azure Prepare and Azure Deploy. It reads an approved .azure/deployment-plan.md, runs deep checks on application configuration, azure.yaml, Bicep or Terraform, RBAC, managed identity, prerequisites, and what-if results, and records actual evidence before it alone may mark the plan Validated.
INSTALL BY AGENT
Choose your Agent
Paths come from official Agent docs or the universal installer behind skills.sh. Compatibility still follows this Skill's record.
.claude/skills/azure-validate/~/.claude/skills/azure-validate/Use project scope for team sharing and personal scope across repositories. The installer defaults to project scope; add -g for personal scope.
npx skills add microsoft/azure-skills --skill azure-validate --agent claude-codeClaude Code discovers custom Skill folders automatically at project or personal scope.
View path evidence ↗TYPICAL WORKFLOW
A practical workflow
Run deployment preflight
Check configuration, infrastructure syntax, dependencies, and Azure readiness step by step.
Verify identity and RBAC
Review managed identities, role assignments, and permission prerequisites before cloud writes.
Record validation proof
Persist commands, timestamps, results, and workflow progress for Azure Deploy to verify.
THE TRADEOFFS
Advantages and tradeoffs
Notable strengths
- This profile is manually organized around the current upstream SKILL.md workflow.
- The capability boundary remains explicitly tied to microsoft/azure-skills.
- Core uses, limitations, and risks are separated for pre-install review.
Limitations
- It requires an Azure Prepare plan already approved or later; it is not a standalone first step.
- Passing static and what-if checks reduces risk but cannot guarantee runtime behavior after deployment.
BEST FIT
Who it is for
Teams enforcing Azure deployment readiness
Reviewers verifying IaC and access prerequisites
BEFORE YOU USE IT
Risks to review before use
False readiness from skipped evidence
Manually changing status or omitting failed checks can send unsafe infrastructure to production. Let the workflow record real results, resolve every failure, and never fabricate validation proof.
Upstream instruction drift
Behavior can change with upstream updates. Record the commit used for important workflows and review updates before adoption.
SECURITY
What the permission profile means
- Declared access remains governed by the current upstream SKILL.md and runtime requests.
- Treat repository files, web content, and tool output as untrusted input.
- SkillSignal has not independently executed or security-audited this package; external skills.sh labels are not SkillSignal certification.
Not a security certification. External ratings are attributed references. SkillSignal has not independently executed or security-reviewed this Skill.
INSIDE THE PACKAGE
Indexed files
TAGS
Manually expanded from the current upstream SKILL.md and linked source at microsoft/azure-skills, checked 2026-08-20. This is an original summary, not an execution result or security certification.