--- title: "Azure validate: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/microsoft-azure-validate/ description: "Pins Microsoft's pre-deploy Azure check, which stops without an approved plan and will not run azd deploy itself." --- # Azure validate: review, setup & limitations · Undominated.ai > Pins Microsoft's pre-deploy Azure check, which stops without an approved plan and will not run azd deploy itself. [← Explore all skills](/skills/) AZURE DEPLOYMENT CHECKS / Microsoft # Azure validate Pins Microsoft's pre-deploy Azure check, which stops without an approved plan and will not run azd deploy itself. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/microsoft/skills/tree/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-validate) SOURCE REVIEW Reviewed 2026-10-15 Evidence 6 linked sources Publisher Microsoft Licence [MIT ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE) Revision fc164ba1d7a0 [Read what was—and wasn’t—checked ↓](#review) “Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration, check if ready to deploy, validate azure.yaml, validate Bicep, test before deploying, troubleshoot deployment errors, validate Azure Functions, validate function app, validate serverless deployment, verify RBAC roles, check role assignments, review managed identity permissions, what-if analysis, validate Container Apps deployment.” [Microsoft · upstream description ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-validate/SKILL.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The catalogue does not already have this gate between azure-prepare and azure-deploy. - The file stops when the approved plan is missing, forbids a deploy while checks fail, and will not call azd up or azd deploy itself. ### A good fit for - Checking Azure deployment readiness and stopping when the user asked only to validate ### Weigh up before choosing - This review did not execute the resource. - /plugin install azure@skills installs the azure plugin group, not this skill alone. The repository README also shows npx skills add microsoft/skills, which prompts for a selection. - The plugin README instead prints /plugin marketplace add microsoft/azure-skills and /plugin install azure@azure-skills. Those lines were not used as the install command. - The plugin README says the azure plugin uses npx to run the Azure MCP Server, should be installed only on a trusted device, and collects telemetry unless AZURE_MCP_COLLECT_TELEMETRY=false. - The skill tells the agent to run references/scripts/workflow.ps1 or workflow.sh. Those scripts were not opened or run. - references/global-rules.md, references/recipes/README.md, and references/role-verification.md were not opened. - The repository README's skill-catalog headings disagree with each other. Those figures were not used. - The source review is pinned to revision fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb, but the unversioned plugin install command selects the marketplace release available when installed; its code and dependencies may differ from this reviewed snapshot. - The validation workflow records progress in .azure/validate-status.json and requires completion of its scripted steps before setting the deployment plan status to Validated. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - .github/plugins/azure-skills/skills/azure-validate/SKILL.md - README.md - LICENSE - .github/plugins/azure-skills/README.md - .github/plugins/azure-skills/LICENSE ### Our findings - The skill stops and sends the reader to azure-prepare when .azure/deployment-plan.md is missing or not yet Approved. - Every check must pass before a deploy, and destructive actions need ask_user. - Status may be set to Validated only after the workflow script is followed to completion. - An explicit deploy request is handed to azure-deploy. The skill forbids calling azd up or azd deploy directly, and a validate-only request stops without that handoff. ### Not established by this review - The resource was not executed and its tools were not called. - workflow.ps1 and workflow.sh were not run. - No deployment plan was created and azd was not run. - Neither install command was run. - Not executed: it was not installed or run. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. [Upstream setup instructions ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md) DOCUMENTED COMMAND /plugin install azure@skills Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The repository README's Plugins section shows /plugin marketplace add microsoft/skills and then /plugin install azure@skills inside Copilot CLI. - That command installs the azure plugin group. This file is one skill under .github/plugins/azure-skills/skills/azure-validate/. - The same README's quick start, npx skills add microsoft/skills, asks the operator to select skills and can install more than this file. - The plugin README prints a different marketplace, microsoft/azure-skills, and /plugin install azure@azure-skills. This record does not use that line. ### Before you start - Copilot CLI if the plugin command is used - bash on macOS or Linux, or PowerShell on Windows, if the workflow script is followed, which this review did not run - An approved azure-prepare plan if validation is continued, which this review did not create - Node.js 22 or later and npm/network access if using the plugin’s Azure MCP server. ### Compatibility GitHub Copilot CLI · Claude Code · GitHub Copilot in VS Code · skills CLI ### Implementation powershell · shell ### Local skill text plus optional Azure deployment credentials - Read the skill - Read a local deployment plan if one exists, which this review did not create - Hand off to azure-deploy only after validation and an explicit deploy request, which this review did not do - Installing the full plugin can download and execute Azure MCP/npm hook code and send usage telemetry; review local npm configuration and the telemetry setting before enabling that plugin path. ### Cost model MIT; no Azure or azd call was made 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [azure-validate SKILL.md ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-validate/SKILL.md) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-validate/SKILL.md Supports: stop without an approved plan, no deploy on failure, and no direct azd deploy - [Repository README ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md Supports: azure plugin install line and MIT statement - [Repository LICENSE ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE Supports: MIT License - [azure-skills plugin README ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/README.md) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/README.md Supports: different plugin install line, npx warning, and telemetry opt-out - [azure-skills plugin LICENSE ↗](https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/LICENSE) Checked 2026-10-14 https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/LICENSE Supports: MIT License, same family as the repository root - [Pinned source sections reviewed in continuation W36 on 2026-10-15 ↗](https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-validate/SKILL.md) Checked 2026-10-15 https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-validate/SKILL.md Supports: upstreamDescription, limitations, review.reviewedAt, review.notTested KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Azure Deploy ↗ Pins Microsoft's Azure deploy skill, which stops unless a separate validation skill has already marked the deployment plan validated.](/skills/microsoft-azure-deploy/)[### Azure app onboard deploy ↗ Pins the app-onboard deploy phase, which requires a what-if preview and an approval gate before it changes Azure, then says to stop.](/skills/microsoft-deploy/)[### Deploy to AKS ↗ Pins Microsoft's skill for deploying an existing web app to a running AKS cluster, which requires az login and refuses to provision the cluster.](/skills/microsoft-azure-kubernetes-app-deploy/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Choose a toolkit](/tools/) - [Inspect execution hosts](/agents/) - [Check tool access](/mcp-servers/) - [Check project dependencies](/check-repo/)