Azure Deploy
DevOpsby microsoft
2/3 audits passMIT
Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files.
Azure Deploy, published by Microsoft in its azure-skills repository, is the execution step of a three-skill workflow: azure-prepare, then azure-validate, then azure-deploy. Before doing anything it checks that .azure/deployment-plan.md exists with status Validated and a populated Validation Proof section, and it forbids the agent from setting that status itself. It then runs a ten-step sequence: a pre-deploy checklist, loading the deployment recipe named in the plan, an RBAC health check for Container Apps with a registry, executing azd up, azd deploy, terraform apply or az deployment, post-deploy steps such as SQL managed identity and migrations, error handling from the recipe, verifying endpoints, live role verification, and reporting endpoint URLs as full https links.
Use it when an application is already prepared for Azure and you want it shipped. It deliberately does not create applications, generate infrastructure code or scaffold projects, which belong to azure-prepare, and destructive actions require asking the user first.
This is a skill for coding agents such as Claude Code with Azure tooling. It is MIT-licensed and importable into BusinessMCP, but it is about deploying infrastructure rather than business data.
What you can do with it
- Ship a prepared app to Azure with azd up
- Push an update to an existing Azure deployment
- Verify AcrPull role propagation before a Container Apps deploy
- Report deployed endpoints as full https URLs
Run it on your business data
Imported into BusinessMCP, Azure Deploy becomes a playbook your AI business analyst applies to your connected GitHub repositories.
Use Azure Deploy in BusinessMCPInstall it in a coding agent
One command adds Azure Deploy to your project.
npx skills add https://github.com/microsoft/azure-skills --skill azure-deployHow we vetted it
- Source
- microsoft/azure-skills at 117b038
- Licence
- MIT
- Security audits (skills.sh)
- Gen Agent Trust Hub: Pass · Socket: Warn · Snyk: Pass
- Bundled scripts
- Yes — read them before installing
- Reviewed by hand
- documents a vendor’s official install script piped to a shell.
Checked 2026-09-25 against its skills.sh listing. How we vet skills
Related skills
All skillsTerraform Skill
Use when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state ops - diagnoses failure mode (identity churn, secrets, blast radius, CI drift, state corruption) with version-aware guards.
AWS CDK Development
AWS Cloud Development Kit (CDK) expert for building cloud infrastructure with TypeScript/Python.
Deploy to Vercel
Deploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".
Frequently asked questions
Can Azure Deploy create a new application?
No. It only executes deployments for applications already prepared by azure-prepare and validated by azure-validate; creating apps or infrastructure is out of scope.
Is Azure Deploy safe to install?
Our static scan flagged pipe-to-shell because a reference file documents installing the Azure Developer CLI by piping Microsoft's official install script to bash. That is a standard installer command, and the skill passed the skills.sh security auditors with no FAIL.
What does it check before deploying?
That .azure/deployment-plan.md exists with status Validated and real validation proof, then a pre-deploy checklist including an RBAC health check where relevant.
Run Azure Deploy against your whole business
Free plan, no credit card.
Use Azure Deploy in BusinessMCP