--- title: "Azure Blob Storage for Python: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/microsoft-azure-storage-blob-py/ description: "Upload, stream and manage blobs using explicit overwrite, metadata and delegated-access choices." --- # Azure Blob Storage for Python: review, setup & limitations · Undominated.ai > Upload, stream and manage blobs using explicit overwrite, metadata and delegated-access choices. [← Explore all skills](/skills/) CLOUD DEVELOPMENT / microsoft # Azure Blob Storage for Python Upload, stream and manage blobs using explicit overwrite, metadata and delegated-access choices. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/microsoft/skills/tree/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py) SOURCE REVIEW Reviewed 2026-10-15 Evidence 4 linked sources Publisher microsoft Licence [MIT ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE) Revision fc164ba1d7a0 [Read what was—and wasn’t—checked ↓](#review) “Azure Blob Storage SDK for Python. Use for uploading, downloading, listing blobs, managing containers, and blob lifecycle. Triggers: "blob storage", "BlobServiceClient", "ContainerClient", "BlobClient", "upload blob", "download blob". ” [microsoft · upstream description ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py/SKILL.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Shared access signatures in this skill are user-delegation keys tied to Entra, not account keys. - Clients are constructed with DefaultAzureCredential, and sync and async clients are not supposed to share a call path. - The definition distinguishes service/container/blob clients, readinto versus readall, virtual-prefix listing and user-delegation SAS issuance. - Stream large downloads into a file or buffer ### A good fit for - Uploading or listing blobs from Python without embedding an account key. - Issuing a short-lived user-delegation SAS instead of an account-key SAS. - Stream large downloads into a file or buffer - Issue a short-lived read SAS using a user delegation key - List blobs by prefix or walk virtual directories with a delimiter. ### Weigh up before choosing - The samples call the storage account URL when executed. The skill does not create the storage account. - A user-delegation key is described as valid for up to 7 days. The file does not renew it. - references/capabilities.md and references/non-hero-scenarios.md returned HTTP 200 and were not quoted here. - This review did not execute the resource. - Examples use overwrite=True and deletion including snapshots; these can replace or remove existing data. - SAS URLs are bearer credentials. Limit permission/expiry and keep them out of logs and shared artifacts. - The abbreviated async download example references an external credential; ensure its ownership and lifetime remain valid. - The setup example uses require_envvar=True, so AZURE_TOKEN_CREDENTIALS is required even for local use despite the adjacent prose. Choose and verify the credential chain explicitly. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - .github/plugins/azure-sdk-python/skills/azure-storage-blob-py/SKILL.md - LICENSE - README.md ### Our findings - Authentication is DefaultAzureCredential against the blob endpoint. Connection strings and account keys are explicitly discouraged, including for SAS issuance. - The skill forbids mixing azure.storage.blob and azure.storage.blob.aio in one call path. Nothing in the file enforces that split. - It does not provision the account, and it does not keep a SAS alive past the delegation window it describes. - The definition distinguishes service/container/blob clients, readinto versus readall, virtual-prefix listing and user-delegation SAS issuance. ### Not established by this review - The resource was not executed and its tools were not called. - The blob client was not constructed and no blob was uploaded. - No skill execution, authenticated service operation, or outcome benchmark was performed. - Not executed: it was not installed or run. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. [Upstream setup instructions ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md) DOCUMENTED COMMAND npx skills add microsoft/skills/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py Copy command ↗ Run in your terminal to choose your AI tools, project or global scope, and installation method. This short command follows the current upstream version; the review covers the revision shown above. Optional: install the reviewed revision Keeps the original source and installer version where recorded, while leaving your AI tools and installation scope for you to choose. npx skills add https://github.com/microsoft/skills/tree/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py Copy reviewed-revision command ↗ - Install the pinned skill directory interactively, retaining its bundled references and scripts. - Select account/container/blob identity and data-plane roles; choose sync or async consistently. - Review overwrite and snapshot behavior, bound transfer concurrency, and close clients/credentials after operations. ### Before you start - Python, matching Azure SDK packages and azure-identity - Authorized Azure resources and operation-specific roles ### Compatibility Agents supporting directory-based SKILL.md instructions ### Local instructions; runtime access depends on the workflow - Read/write/delete blobs and snapshots, change metadata/content headers and request user delegation keys when authorized. ### Cost model The skill is free; service usage and infrastructure can incur charges. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Pinned skill definition ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py/SKILL.md) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py/SKILL.md Supports: summary, whySelected, bestFor, limitations, install, access, review - [Publisher repository and installation guidance ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md Supports: install - [MIT licence ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE Supports: license - [Pinned source sections reviewed in continuation W33 on 2026-10-15 ↗](https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py/SKILL.md) Checked 2026-10-15 https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-storage-blob-py/SKILL.md Supports: upstreamDescription, bestFor, review.reviewedAt, review.notTested KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Azure AI Search for Python ↗ Create vector-capable indexes and combine keyword, vector and semantic queries.](/skills/microsoft-azure-search-documents-py/)[### Azure Event Hubs for Python ↗ Publish partitioned events and consume streams with explicit checkpoint ownership.](/skills/microsoft-azure-eventhub-py/)[### Azure Identity for Python ↗ Select and diagnose Entra credential chains across development, hosted workloads and delegated access.](/skills/microsoft-azure-identity-py/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Choose a toolkit](/tools/) - [Inspect execution hosts](/agents/) - [Check tool access](/mcp-servers/) - [Check project dependencies](/check-repo/)