Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
This collection provides the technical logic to bridge natural language questions with Kusto Query Language (KQL) and Incident Response Query Language (IRQL). It enables security operations center analysts to compose complex pipelines for threat hunting, focusing on activities like investigating phishing and lateral movement.
The skills cover the full lifecycle of graph analysis in Kusto, from defining edges and node lookups to executing pattern matching and shortest-path discovery. This structure transforms raw security data into navigable graphs for identifying connected components in a network.
Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.
Follow the documented setup, then try a first task.
I’m using
APM multi-harness installation
Installs: Complete Azure Skills Plugin across the harnesses configured by the repository's apm.yml, including its skills and MCP-backed capability layers. · GitHub Copilot, Claude Code, Cursor, OpenCode, Codex, Gemini
Before you start
APM
An Azure account or subscription
Node.js 18+ on PATH with npx available
Azure CLI installed and authenticated
Azure Developer CLI installed and authenticated if deployment workflows will be used
Installs: Azure MCP extension and its companion extension, which automatically configure Azure MCP Server, Foundry MCP, and the full Azure skills layer. · GitHub Copilot in VS Code
Before you start
VS Code
An Azure account or subscription
Node.js 18+ on PATH with npx available
Azure CLI installed and authenticated
Azure Developer CLI installed and authenticated if deployment workflows will be used
Platform: VS Code
In VS Code, install the Azure MCP extension from the Visual Studio Marketplace. Its companion extension installs the Azure skills and configures Azure MCP Server, Foundry MCP, and the skills layer automatically.
Installs: Complete Azure skills bundle from .github/plugins/azure-skills/skills, installed globally for GitHub Copilot. · GitHub Copilot in IntelliJ IDEA
Before you start
IntelliJ IDEA
Node.js 18+ with npx available on PATH
Git accessible from the command line
GitHub Copilot plugin version 1.5.64-242 or higher
GitHub Copilot Skills enabled in IntelliJ IDEA
An Azure account or subscription
Azure CLI installed and authenticated
Azure Developer CLI installed and authenticated if deployment workflows will be used
Platform: IntelliJ IDEA on Windows, Linux, or macOS
In IntelliJ IDEA, install the GitHub Copilot plugin version 1.5.64-242 or higher, restart the IDE, then enable Skills under Tools > GitHub Copilot > Chat.
Open a terminal or command prompt and run this command to install the Azure skills globally for GitHub Copilot.
npx skills add https://github.com/microsoft/azure-skills/tree/main/.github/plugins/azure-skills/skills -a github-copilot -g -y
Cost Management Reader, Monitoring Reader, and Reader roles on the target scope
Desired historical period
Use the azure-cost skill to summarize historical costs for my target Azure scope and identify the largest cost categories. Do not modify any resources. Target scope: [subscription, resource group, management group, or billing account ID].
Use the azure-compute skill's VM Recommender workflow to recommend and compare a small set of VM or VMSS options for these workload requirements and constraints, including pricing considerations. Do not create or provision anything. Workload: [describe workload]. Constraints: [describe constraints].
Relevant namespace, entity name, consumer group, or connection configuration
Use the azure-messaging skill to perform an initial diagnosis of this Azure Event Hubs or Service Bus SDK problem and recommend a fix, citing the documentation you find. Do not change resources or send messages. SDK and version: [value]. Exact error or symptom: [value]. Namespace and entity configuration: [value].
Claude
Codex
Cursor
Gemini CLI
Copilot
OpenCode