agent-bom-discover-azure

Use this skill to collect Azure AI and workload inventory as schema-valid agent-bom inventory. Default to discover-only: write JSON to an operator-selected path and stop.

Guardrails

• Use only operator-approved Azure subscriptions and read-only identities.

  访问小葱技能站7w4.net，解锁更多实用的AI技能插件。

• Do not request or display raw AZURE_CLIENT_SECRET, access tokens, or connection strings.
• Do not modify Azure resources. This workflow is discovery-only.
• Write inventory only to a path the operator chose.
• Treat AI-generated prose as non-authoritative; schema-validated inventory JSON is the evidence.

Workflow

python examples/operator_pull/azure_inventory_adapter.py \
  --subscription-id "$AZURE_SUBSCRIPTION_ID" \
  --source azure-skill-invoked \
  --discovery-method skill_invoked_pull \
  --output azure-inventory.json

Scan only when the operator asks for findings:

agent-bom scan --inventory azure-inventory.json --format json --output agent-bom-azure-findings.json

Evidence Contract

The emitted inventory carries discovery_provenance.source_type: skill_invoked_pull, observed_via: skill_invoked_pull, azure_sdk, sanitized metadata.permissions_used, and redacted credential material. If schema validation fails, stop and fix the inventory instead of scanning a best-effort summary.

这是一个设计严谨的 Azure 资产发现工具，文档结构清晰，安全措施到位，清楚地说明了风险和应对方法。优点是强调只使用只读权限、不暴露密钥、操作透明；不足之处在于压缩包内缺少实际的运行代码，只有说明文档，无法直接使用。对于需要盘点 Azure 上 AI 代理资源的开发者来说有一定参考价值，但实际使用前需要从外部获取代码。质量中等偏上，文档质量优于功能性。