agent-bom discover azure
Discover Azure AI Assets and Generate Standardized Bill of Materials
Install & Use
Copy this prompt and send it to your AI assistant (Claude / Cursor / TRAE / Codex / WorkBuddy etc.) to auto-install:
Help me install this AI Skill: agent-bom discover azure. It is used for: Discover Azure AI Assets and Generate Standardized Bill of Materials Full Skill content: https://321skill.com/skills/agent-bom-discover-azure-x-10/raw/index.md Read that page and install it.
The prompt includes a link to the full Skill content. You can also view the full content.
This Skill addresses the challenge of quickly discovering AI Agent and MCP-related assets within the Azure cloud environment. In practical development, operations and development teams often need to inventory resources such as Azure OpenAI, Container Apps, AKS, Functions, and ML Workspaces. However, manual collection is time-consuming, prone to omissions, and makes it difficult to generate a uniformly formatted inventory for subsequent scanning or auditing.
Usage is straightforward: you only need Azure read-only permissions (via Azure CLI, workload identity, managed identity, or service principal) and then run a single command. It automatically calls the Azure SDK to discover AI-related resources within the subscription and outputs a JSON inventory file compliant with the agent-bom specification. You can then optionally use the agent-bom scan command to perform security scanning on this inventory. The entire process does not require handing long-term credentials to third parties.
It is ideal for teams or individuals who need to regularly inventory cloud-based AI assets, conduct compliance audits, or perform security scans. Particularly for operations engineers and agent developers already using the agent-bom ecosystem and wishing to manage multi-cloud AI asset inventories uniformly, it integrates seamlessly into existing workflows.
It is recommended to use this tool to generate the latest inventory after each major deployment or during regular inspections. Note that it performs read-only discovery operations and will not modify any Azure resources. Credentials reside only in the operator's environment and are not leaked. Sensitive information (such as keys) in the output JSON is automatically redacted.
Key Features
Unlike Azure Resource Graph or custom scripts, it specifically targets the discovery of AI Agent and MCP-related assets (such as Azure OpenAI, Container Apps, AKS, etc.) and directly outputs agent-bom specification JSON, supporting subsequent one-click scanning. General-purpose resource query tools require additional format conversion.
Limitations
Requires a Python 3.11+ environment and depends on the agent-bom package (installable from PyPI). It only supports the Azure cloud platform and is not applicable to other clouds or on-premises environments.
FAQ
What Azure permissions are required?
Azure read-only permissions are required. It is recommended to use Azure CLI login, workload identity, managed identity, or short-term service principal credentials. Do not use long-term client secrets.
What format is the output file?
The output is a JSON inventory file compliant with the agent-bom specification. It includes fields such as resource type, name, region, and tags. Sensitive information is automatically redacted.
Installation guide for AI assistants
If your AI coding assistant (Claude Code, Cursor, TRAE etc.) can see this page, send it this message to auto-install:
Visit https://321skill.com/skills/agent-bom-discover-azure-x-10/raw/index.md to read the original Skill definition (Markdown format) for agent-bom discover azure, and install it according to the instructions.
Raw Markdown URL for AI: /skills/agent-bom-discover-azure-x-10/raw/index.md