En

agent-bom discover azure

Discover Azure AI assets and generate standardized inventory

开发流程 扫描Azure环境生成AI资产清单 通用 ★ 2.6k Updated 2026-08-02

Install & Use

Copy this prompt and send it to your AI assistant (Claude / Cursor / TRAE / Codex / WorkBuddy etc.) to auto-install:

Help me install this AI Skill: agent-bom discover azure.
It is used for: Discover Azure AI assets and generate standardized inventory
Full Skill content: https://321skill.com/skills/agent-bom-discover-azure-x/raw/index.md
Read that page and install it.

The prompt includes a link to the full Skill content. You can also view the full content.

This Skill addresses the challenge of uniformly inventorying AI Agent and MCP-related assets in Azure cloud environments. In practice, operations and development teams often need to manually log into the Azure Portal or use multiple CLI commands to locate resources such as Azure OpenAI, Container Apps, AKS, Functions, and ML workspaces. The lack of a standardized inventory format leads to inefficiencies in asset management and security auditing.

Usage is straightforward: ensure you have Python 3.11+ and the agent-bom tool installed locally, and obtain Azure read-only credentials via Azure CLI, workload identity, or managed identity. You can then invoke this Skill using natural language instructions. It will automatically execute Azure SDK discovery logic, generate a JSON inventory file compliant with the agent-bom specification, and optionally perform a security scan on that inventory.

It is well-suited for operations engineers, agent developers, and project managers who need to regularly inventory cloud-based AI infrastructure. Teams already using agent-bom for asset inventory management can seamlessly integrate this Skill to achieve a complete workflow from discovery to scanning, while avoiding exposure of long-term Azure credentials to the agent-bom service.

It is recommended to use this tool uniformly within CI/CD pipelines or regular inspection tasks. Note that it primarily relies on Azure read-only identity chains and does not support modifying resources. Generated inventory files should be stored securely, and the safety of the output path should be confirmed before scanning.

Key Features

Unlike generic resource queries using Azure Resource Graph or Azure CLI, this Skill specifically discovers AI Agent and MCP-related assets (such as Azure OpenAI, Container Apps, AKS, etc.) and outputs a standardized agent-bom inventory JSON format, which can be directly used for subsequent dependency scanning and security audits.

Limitations

Requires Python 3.11+ and the agent-bom tool. It only supports Azure read-only credentials (Azure CLI, workload identity, managed identity, or short-lived service principals) and does not support modifying Azure resources.

FAQ

How do I obtain Azure read-only credentials?

Prefer using Azure CLI login (`az login`), or configure workload identity / managed identity. Avoid using long-term client secrets; this Skill will not ask you to paste any keys.

What scenarios can the generated inventory file be used for?

It can be used for agent-bom's scanning function (`agent-bom scan --inventory`), and also serves as input for asset auditing, compliance checks, or migration planning.

Installation guide for AI assistants

If your AI coding assistant (Claude Code, Cursor, TRAE etc.) can see this page, send it this message to auto-install:

Visit https://321skill.com/skills/agent-bom-discover-azure-x/raw/index.md to read the original Skill definition (Markdown format) for agent-bom discover azure, and install it according to the instructions.