AZURE DEPLOYMENT / Microsoft
Azure app onboard deploy
Pins the app-onboard deploy phase, which requires a what-if preview and an approval gate before it changes Azure, then says to stop.
“Invoked by the `azure-app-onboard` orchestrator at Phase 4 when `scaffold-manifest.json` exists with `files[]` and `validationResult`. Not directly user-routable.”
01 / THE REASONING
Why this made the selection.
- Preflight requires authentication, a mandatory what-if preview, RBAC, and the resource group before the deploy approval gate.
- A location change on retry requires that gate again, and the file says to stop further CLI commands after the result is finalized.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- .github/plugins/azure-skills/skills/azure-app-onboard/deploy/SKILL.md
- .github/plugins/azure-skills/README.md
- README.md
- LICENSE
Our findings
- Preflight lists authentication, a mandatory what-if preview, RBAC, and the resource group before the deploy approval gate.
- Before a deployment retry, a location that no longer matches the plan requires the approval gate again.
- Secure parameters are generated instead of asking the user for passwords, and a retry must reuse the stored values rather than generate new ones.
- After health checks, every App Service or Functions app must have SCM basic publishing credentials denied, and the following read must show that allow is false.
- The healing loop asks the user after three attempts and then every five, and the file says to stop with no further CLI commands once the result is finalized.
Not established by this review
- The resource was not executed and its tools were not called.
- No Azure deployment, what-if, or health check was run.
- No publishing-credentials policy was changed.
- This was source reading only and is not a runtime or security certification.
- Not executed: it was not installed or run.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Add a skill to your workflow.
DOCUMENTED COMMAND
/plugin install azure@skillsCopying does not execute this command. It may retrieve a newer version than the reviewed source.
- The root README Copilot CLI section shows /plugin marketplace add microsoft/skills and then the command above.
- That command installs the azure plugin group. It does not install this one file by itself.
- The same README quick start, npx skills add microsoft/skills, asks the operator to select skills and can install more than this file.
- The azure plugin README at this pin instead shows /plugin marketplace add microsoft/azure-skills and /plugin install azure@azure-skills.
Before you start
- Copilot CLI if the plugin command is used
- Node.js 22 or later for the Azure MCP server named by the plugin README, which this review did not install
- An Azure login if the workflow is followed, which this review did not use
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-app-onboard/deploy/SKILL.md
Supports: what-if preview, re-approval on location change, and stop after the result
- Azure plugin README ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/README.md
Supports: Copilot CLI or Claude Code, and a different azure plugin install line
- Repository README ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md
Supports: azure plugin install line and MIT statement
- Repository LICENSE ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE
Supports: MIT License
https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-app-onboard/deploy/SKILL.md
Supports: upstreamDescription, bestFor, review.reviewedAt, review.notTested