azure-waf-review
Use when assessing an Azure workload against the Well-Architected Framework and prioritizing remediation.
Skill by ivegamsft
Chalk Labs
Need help deploying azure-waf-review?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/ivegamsft-azure-waf-review
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: testing, devops, cloud, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md and code. Checked Oct 26, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/azure-waf-review
What's inside
- Skill name
azure-waf-review- Description
- Use when assessing an Azure workload against the Well-Architected Framework and prioritizing remediation. USE FOR: run an Azure Well-Architected review, score a workload across WAF pillars, review Terraform or Bicep for reliability and security gaps, prioritize remediation actions, assess an architecture before production. DO NOT USE FOR: penetration testing, incident response triage, writing new product features.
- License
- MIT
- Metadata
- category: infrastructure · maturity: stable
- Instructions
- 19 lines in SKILL.md · view on GitHub
Agent Skills spec issues
- compatibility: must be text of at most 500 characters
- allowed-tools: must be a space-separated string
Files (7)
- SKILL.md
- eval.yaml
- pillar-scoring-rubric.md
- pillar-guide.md · references/
- workflow-guardrails.md · references/
- remediation-action-plan-template.md
- waf-assessment-report-template.md
SKILL.md (first lines)
# Azure Well-Architected Framework Review Skill Assess Azure workloads against the five WAF pillars, generate scored findings reports, and produce prioritized remediation guidance with Bicep/Terraform templates. ## Reference Files | File | Contents | |------|----------| | [`references/pillar-guide.md`](references/pillar-guide.md) | Five WAF pillars with key concerns, full 7-step assessment workflow, template index, all references | | [`references/workflow-guardrails.md`](references/workflow-guardrails.md) | Guardrails for scope, secrets, and advisory use; agent pairing guidance | ## Key Patterns - Score each pillar 1–5; flag findings Critical / High / Medium / Low - Rank by impact × effort matrix — surface quick wins first - Never emit secrets or credentials in generated IaC - Pair with `solution-architect` (full assessment) and `devops-engineer` (IaC remediation)
From ivegamsft/basecoat, MIT.
More from ivegamsft/basecoat
- 0.606score
api-security
ivegamsft
Use when securing REST or GraphQL APIs against common auth, authorization, validation, and abuse risks.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
app-inventory
ivegamsft
Use when inventorying legacy applications to capture dependencies, service bindings, framework versions, and migration complexity.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
azure-devops-rest
ivegamsft
Use when building automations that call Azure DevOps REST APIs for work items, pipelines, repos, and artifacts.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
agentic-sdlc-autonomy
ivegamsft
Use when asked to audit, measure, implement, or operate rules-based human-in-the-loop autonomy for agent-operated repositories.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
azure-linux-app-service
ivegamsft
Use when deploying or operating Python, Ruby, or Node.js apps on Azure App Service Linux.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
agentic-cost-audit
ivegamsft
Audits agentic CI workflows for model and token waste and reports ranked remediations.
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
azure-policy-audit
ivegamsft
Use when reviewing Azure Policy definitions, initiatives, exemptions, remediation tasks, or compliance reporting.
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
backend-audit
ivegamsft
Audits generated or implemented backend code output.
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
agentops-audit
ivegamsft
Audits and improves agent/skill specs with a scored rubric and routing rationale.
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
azure-identity-audit
ivegamsft
Use when reviewing Azure identity and access designs across RBAC, managed identities, Entra ID, and federation.
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
agent-design
ivegamsft
Use when designing Copilot agents, skills, or instruction assets for a shared customization repo.
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
api-audit
ivegamsft
Audits API endpoint designs, contracts, versioning strategies, and error handling.
SkillAFreshness: A★ 4Claude Code +9
Signals
- Stars
- 4
- Forks
- 1
- Open issues
- 10
- Last commit (this folder)
- Jul 8, 2026 (3 months ago)
- Last release
- Oct 11, 2026 (20 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/ivegamsft/basecoat
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from ivegamsft
- 0.606score
azure-devops-rest
ivegamsft
Use when building automations that call Azure DevOps REST APIs for work items, pipelines, repos, and artifacts.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
agentic-sdlc-autonomy
ivegamsft
Use when asked to audit, measure, implement, or operate rules-based human-in-the-loop autonomy for agent-operated repositories.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
agentic-cost-audit
ivegamsft
Audits agentic CI workflows for model and token waste and reports ranked remediations.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
api-security
ivegamsft
Use when securing REST or GraphQL APIs against common auth, authorization, validation, and abuse risks.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
app-inventory
ivegamsft
Use when inventorying legacy applications to capture dependencies, service bindings, framework versions, and migration complexity.
SkillAFreshness: A★ 4Claude Code +9 - 0.606score
azure-linux-app-service
ivegamsft
Use when deploying or operating Python, Ruby, or Node.js apps on Azure App Service Linux.
SkillAFreshness: A★ 4Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get azure-waf-review running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
azure-waf-review skill. Agent Mart. https://agentmart.dev/skills/ivegamsft-azure-waf-review (last updated 2026-10-24)