--- title: "AKS Automatic Readiness: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/microsoft-azure-kubernetes-automatic-readiness/ description: "Pins Microsoft's AKS Automatic readiness skill, which assesses a cluster or local manifests without changing the cluster and writes files only after an accepted diff." --- # AKS Automatic Readiness: review, setup & limitations · Undominated.ai > Pins Microsoft's AKS Automatic readiness skill, which assesses a cluster or local manifests without changing the cluster and writes files only after an accepted diff. [← Explore all skills](/skills/) CLOUD OPERATIONS / Microsoft # AKS Automatic Readiness Pins Microsoft's AKS Automatic readiness skill, which assesses a cluster or local manifests without changing the cluster and writes files only after an accepted diff. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/microsoft/skills/tree/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness) SOURCE REVIEW Reviewed 2026-10-15 Evidence 5 linked sources Publisher Microsoft Licence [MIT ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE) Revision fc164ba1d7a0 [Read what was—and wasn’t—checked ↓](#review) “Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility. Identifies incompatibilities, generates fixes, and guides migration from AKS Standard to AKS Automatic. WHEN: migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess cluster for Automatic compatibility, fix deployment for Automatic compatibility, identify AKS Automatic migration blockers, is my cluster ready for AKS Automatic.” [Microsoft · upstream description ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The first guardrail says the assessment never modifies cluster state and names kubectl apply and az aks update as forbidden. - Secret and ConfigMap values are withheld, and a local manifest write waits for an explicit acceptance of the diff. ### A good fit for - Checking whether existing manifests or a connected AKS cluster can move to AKS Automatic without changing that cluster - Separate warning-only and conditional safeguards from migration blockers when reporting AKS Automatic readiness. ### Weigh up before choosing - The resource was not executed, and no Azure API, CLI, or MCP tool was called. - /plugin install azure@skills installs the Azure plugin group, not this one skill file. - The plugin README warns that the plugin uses npx to download and run the Azure MCP server and that a compromised .npmrc could make that npx step execute untrusted code. This review did not install the plugin. - The plugin README says usage telemetry is collected unless AZURE_MCP_COLLECT_TELEMETRY=false. That switch was not tested. - The constraint spec, common-fixes note, migration summary, and jq sanitizer were not fetched. The file's rule counts were not checked against the spec. - The success template tells the user to apply cluster configuration changes and create a target cluster, while the guardrails say this skill does not change cluster state and routes creation to azure-kubernetes. - The file says there is no documented in-place switch from Standard to Automatic. That claim was not checked against a Microsoft Learn page. - A 401 or 403 read is told to continue offline. No authentication failure was reproduced. - The source review is pinned to revision fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb, but the unversioned plugin install command selects the marketplace release available when installed; its code and dependencies may differ from this reviewed snapshot. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - .github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md - .github/plugins/azure-skills/README.md - README.md - LICENSE ### Our findings - Guardrail 1 says the assessment is read-only and not to run kubectl apply, az aks update, or any other command that changes the cluster. - Guardrail 2 says not to transmit or display Secret data, ConfigMap data values, secretKeyRef values, service account tokens, or connection strings. - Local file edits are presented as diffs, and both a single fix and a fix-all batch wait for explicit approval before any write. - It says not to guess an image tag, and it says migration to Automatic is a new cluster plus a workload move rather than an in-place Standard to Automatic change. ### Not established by this review - The resource was not executed and its tools were not called. - kubectl, jq, and the Azure MCP reads were not run. - The bundled constraint spec and sanitizer script were not fetched. - Not executed: it was not installed or run. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. [Upstream setup instructions ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md) DOCUMENTED COMMAND /plugin install azure@skills Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The repository README tells Copilot CLI to add the microsoft/skills marketplace and then run /plugin install azure@skills. - That command installs the Azure plugin group named in the README table, not this skill file by itself. - The azure-skills plugin README instead prints /plugin marketplace add microsoft/azure-skills and /plugin install azure@azure-skills. This review did not resolve that second marketplace name. ### Before you start - Node.js 22 or later, which the plugin README requires for the Azure MCP server - Azure authentication by Azure CLI login, service-principal environment variables, or managed identity, as the plugin README lists - A host that can run the Copilot CLI plugin slash command ### Compatibility Claude Code · GitHub Copilot CLI · GitHub Copilot in VS Code ### Implementation shell · yaml ### Read-only AKS Automatic assessment; local file writes need approval - Read cluster metadata and sanitized workload fields, or assess local manifests offline - Do not change cluster state and do not display secret or ConfigMap data values - Write a manifest fix only after the user accepts the diff - Installing the full plugin can download and execute Azure MCP/npm hook code and send usage telemetry; review local npm configuration and the telemetry setting before enabling that plugin path. ### Cost model MIT licence. No Azure or cluster call was made, and Azure prices were not checked. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [azure-kubernetes-automatic-readiness SKILL.md ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md Supports: read-only cluster rule, secret redaction, and diff approval before file writes - [Repository README ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md Supports: MIT licence heading and the azure plugin install line - [Azure plugin README ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/README.md) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/README.md Supports: Azure authentication options, Node.js 22, and a different plugin install line - [Repository LICENSE ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE Supports: MIT License, copyright Microsoft Corporation - [Pinned source sections reviewed in continuation W21 on 2026-10-15 ↗](https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md) Checked 2026-10-15 https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md Supports: upstreamDescription, bestFor, review.reviewedAt, review.notTested KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Azure Kubernetes ↗ Pins Microsoft's AKS cluster skill, which refuses to print secrets or subscription identifiers and sends application deployment to a different skill.](/skills/microsoft-azure-kubernetes/)[### Deploy to AKS ↗ Pins Microsoft's skill for deploying an existing web app to a running AKS cluster, which requires az login and refuses to provision the cluster.](/skills/microsoft-azure-kubernetes-app-deploy/)[### Microsoft Azure Diagnostics ↗ Routes Azure incidents through resource health, recent changes, logs and service-specific troubleshooting guides.](/skills/microsoft-azure-diagnostics/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Choose a toolkit](/tools/) - [Inspect execution hosts](/agents/) - [Check tool access](/mcp-servers/) - [Check project dependencies](/check-repo/)