agentskills.codes
AZ

azure-role-selector

by githubSecuritySource

Helps developers assign the correct Azure RBAC roles based on specific permission requirements.

Security AuditDevops

Install

mkdir -p .claude/skills/azure-role-selector && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/3416" && unzip -o skill.zip -d .claude/skills/azure-role-selector && rm skill.zip

Installs to .claude/skills/azure-role-selector

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.
229 chars✓ has a “when” trigger
Beginner

Key capabilities

  • →Identify minimal roles for specific permissions
  • →Generate CLI commands for role assignments
  • →Create custom role definitions
  • →Provide Bicep snippets for role assignments

How it works

The agent uses Azure documentation and schema tools to map requested permissions to the least privilege role, then generates the corresponding deployment code.

Inputs & outputs

You give it
Desired permissions list
You get back
Role assignment CLI command and Bicep snippet

When to use azure-role-selector

  • →Finding minimal roles
  • →Applying least privilege access
  • →Generating role assignment CLI commands
  • →Creating custom role definitions

About this skill

Use 'Azure MCP/documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity (If no built-in role matches the desired permissions, use 'Azure MCP/extension_cli_generate' tool to create a custom role definition with the desired permissions). Use 'Azure MCP/extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity and use the 'Azure MCP/bicepschema' and the 'Azure MCP/get_bestpractices' tool to provide a Bicep code snippet for adding the role assignment.

When not to use it

  • →Directly modifying Azure resource configurations
  • →Executing administrative tasks outside of role assignment

Limitations

  • →Depends on availability of Azure documentation and schema tools

How it compares

It automates the lookup and syntax generation process instead of requiring manual search through Azure role documentation.

Compared to similar skills

azure-role-selector side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
azure-role-selector (this skill)27moNo flagsBeginner
secrets-management53moReviewAdvanced
healthcheck102moReviewIntermediate
secops-setup-antigravity47moReviewIntermediate

Try saying

Example prompts that trigger this skill in your AI assistant.

More by github

View all by github →

meeting-minutes

github

Generate concise, actionable meeting minutes for internal meetings. Includes metadata, attendees, agenda, decisions, action items (owner + due date), and follow-up steps.

41210

penpot-uiux-design

github

Comprehensive guide for creating professional UI/UX designs in Penpot using MCP tools. Use this skill when: (1) Creating new UI/UX designs for web, mobile, or desktop applications, (2) Building design systems with components and tokens, (3) Designing dashboards, forms, navigation, or landing pages, (4) Applying accessibility standards and best practices, (5) Following platform guidelines (iOS, Android, Material Design), (6) Reviewing or improving existing Penpot designs for usability. Triggers: "design a UI", "create interface", "build layout", "design dashboard", "create form", "design landing page", "make it accessible", "design system", "component library".

27145

excalidraw-diagram-generator

github

Generate Excalidraw diagrams from natural language descriptions. Use when asked to "create a diagram", "make a flowchart", "visualize a process", "draw a system architecture", "create a mind map", or "generate an Excalidraw file". Supports flowcharts, relationship diagrams, mind maps, and system architecture diagrams. Outputs .excalidraw JSON files that can be opened directly in Excalidraw.

1879

markdown-to-html

github

Convert Markdown files to HTML similar to `marked.js`, `pandoc`, `gomarkdown/markdown`, or similar tools; or writing custom script to convert markdown to html and/or working on web template systems like `jekyll/jekyll`, `gohugoio/hugo`, or similar web templating systems that utilize markdown documents, converting them to html. Use when asked to "convert markdown to html", "transform md to html", "render markdown", "generate html from markdown", or when working with .md files and/or web a templating system that converts markdown to HTML output. Supports CLI and Node.js workflows with GFM, CommonMark, and standard Markdown flavors.

1662

git-commit

github

Execute git commit with conventional commit message analysis, intelligent staging, and message generation. Use when user asks to commit changes, create a git commit, or mentions "/commit". Supports: (1) Auto-detecting type and scope from changes, (2) Generating conventional commit messages from diff, (3) Interactive commit with optional type/scope/description overrides, (4) Intelligent file staging for logical grouping

1149

powerbi-modeling

github

Power BI semantic modeling assistant for building optimized data models. Use when working with Power BI semantic models, creating measures, designing star schemas, configuring relationships, implementing RLS, or optimizing model performance. Triggers on queries about DAX calculations, table relationships, dimension/fact table design, naming conventions, model documentation, cardinality, cross-filter direction, calculation groups, and data model best practices. Always connects to the active model first using power-bi-modeling MCP tools to understand the data structure before providing guidance.

1161

You might also like

secrets-management

wshobson

Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.

585

healthcheck

openclaw

Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw (laptop, workstation, Pi, VPS).

1073

secops-setup-antigravity

google

Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.

443

cloud-penetration-testing

davila7

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.

343

security-scanning-security-hardening

sickn33

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

333

secrets-manager

itsmostafa

AWS Secrets Manager for secure secret storage and rotation. Use when storing credentials, configuring automatic rotation, managing secret versions, retrieving secrets in applications, or integrating with RDS.

16

Search skills

Search the agent skills registry