This skill can provision, modify, destroy, and
Claims to do
Azure Enterprise Infra Planner: Activate this skill when user wants to: - Plan enterprise Azure infrastructure from a workload or architecture description - Architect a landing zone, hub-spoke network, or multi-region topology - Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways - Plan identity, RBAC, and compliance-driven infrastructure - Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments - Plan disaster recovery, failover, or cross-region high-availability topologies
Actually does
This skill utilizes internal MCP tools to search and retrieve Azure best practices, Well-Architected Framework guides, Microsoft Learn documentation, and Bicep schemas. It then generates infrastructure-as-code (IaC) plans, which can be validated and deployed using Azure CLI commands (`az deployment group create`, `az bicep build`, `az resource list`) and Terraform CLI commands (`terraform init`, `terraform plan`, `terraform validate`, `terraform apply`).
The skill explicitly uses `az deployment group create` and `terraform apply` commands, enabling it to provision, modify, and destroy Azure infrastructure. This capability, while core to its function, poses a high risk if misused by a compromised agent.
`az deployment group create`, `terraform apply`
The skill utilizes the `az resource list` command, allowing it to enumerate existing Azure resources. While necessary for infrastructure planning, this capability could be leveraged for reconnaissance in a compromised scenario.
`az resource list`
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-enterprise-infra-planner)<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-enterprise-infra-planner"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-enterprise-infra-planner.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-enterprise-infra-planner.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.