agent-bom discover azure
Discover Azure AI assets and generate a Bill of Materials (BOM) inventory.
Install & Use
Copy this prompt and send it to your AI assistant (Claude / Cursor / TRAE / Codex / WorkBuddy etc.) to auto-install:
Help me install this AI Skill: agent-bom discover azure. It is used for: Discover Azure AI assets and generate a Bill of Materials (BOM) inventory. Full Skill content: https://321skill.com/skills/agent-bom-discover-azure-x-11/raw/index.md Read that page and install it.
The prompt includes a link to the full Skill content. You can also view the full content.
This Skill addresses the challenge of scattered AI agent and MCP-related assets in Azure cloud environments, which are difficult to inventory uniformly. In practical operations, teams often need to manually catalog resources such as Azure OpenAI, Container Apps, AKS, Functions, and Machine Learning, lacking a standardized inventory format that complicates subsequent scanning and auditing.
Usage is straightforward: you only need read-only Azure permissions (via Azure CLI, workload identity, managed identity, or service principal), then run a single Python command. It automatically invokes the Azure SDK for read-only discovery, outputs an inventory JSON file compliant with the agent-bom specification, and by default remains in the discovery phase without modifying any resources. Afterwards, you can perform security scans on the inventory using the agent-bom scan command.
It is particularly suitable for operations engineers and agent developers who need to regularly inventory Azure AI infrastructure. Especially for teams already using the agent-bom ecosystem, it allows seamless integration of Azure assets into a unified Bill of Materials management workflow, avoiding the security risks associated with providing long-term Azure credentials to agent-bom.
Before first use, ensure a Python 3.11+ environment is set up and install the agent-bom package via pip. Note that it only supports read-only operations and will not create or modify any Azure resources; the output path is specified by the operator, and credential information is automatically redacted.
Key Features
Unlike the native Azure resource explorer, it outputs a JSON inventory in the agent-bom specification format, which can be directly consumed by tools like `agent-bom scan`. It also eliminates the need for long-term credentials, operating solely on the operator's existing Azure identity chain.
Limitations
Requires Python 3.11+, depends on Azure read-only permissions (Azure CLI, workload identity, managed identity, or service principal), and does not support modifying resources.
FAQ
What Azure permissions are required?
Only read-only permissions are needed. Using an identity from Azure CLI login, workload identity, or managed identity is recommended; no long-term client secrets are required.
How do I install this Skill?
Install the agent-bom package via pip: `pip install agent-bom`, then use the `azure_inventory_adapter.py` script from the repository.
Installation guide for AI assistants
If your AI coding assistant (Claude Code, Cursor, TRAE etc.) can see this page, send it this message to auto-install:
Visit https://321skill.com/skills/agent-bom-discover-azure-x-11/raw/index.md to read the original Skill definition (Markdown format) for agent-bom discover azure, and install it according to the instructions.
Raw Markdown URL for AI: /skills/agent-bom-discover-azure-x-11/raw/index.md