Azure Toolkit Pro automates enterprise Azure infrastructure management, multi-region deployment, compliance auditing, security scanning, monitoring, and cost optimization.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install azure-toolkit-pro
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install azure-toolkit-pro using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Azure Toolkit Pro?
Azure Toolkit Pro is an enterprise Azure operations skill for AI agents, developers, and platform teams. It provides structured workflows for managing compute, storage, networking, databases, security, monitoring, AI/ML, and analytics services across Azure environments.
As part of Openclaw Skills, it extends basic Azure CLI operations with infrastructure as code using Bicep, Terraform, or ARM, multi-region deployment, disaster recovery, compliance checks, security scans, budget analysis, and actionable optimization recommendations. It supports Windows, macOS, and Linux, accepts Chinese or English interaction, and returns structured results with status codes, output data, and logs.
Azure Toolkit Pro Use Cases
- Generate and deploy highly available Azure architectures with Bicep, Terraform, or ARM templates.
- Provision and manage workloads across East US, West US, Western Europe, Southeast Asia, and other Azure regions.
- Audit environments against CIS Azure Benchmark, Azure Security Benchmark, ISO 27001, and SOC 2 requirements.
- Scan Azure resources for security and vulnerability issues involving Key Vault, Microsoft Entra ID, Defender for Cloud, and Sentinel.
- Analyze historical Azure spending, identify idle resources, and produce cost-saving recommendations.
- Configure Azure Monitor, Application Insights, Log Analytics, custom alerts, and operational dashboards.
- Build cross-region disaster recovery plans with configurable recovery point and recovery time objectives.
- Automate repeatable Azure operations in CI/CD pipelines using service principal authentication.
- Query, create, export, and manage Azure resources through parameterized agent workflows.
- Use Openclaw Skills to give individual developers and enterprise operations teams a reusable Azure automation layer.
How Azure Toolkit Pro Works
- The agent receives a natural-language request or structured
inputdescribing the Azure management task. - Optional
optionsconfigure the execution mode, output format, IaC engine, regions, standards, or other preferences;callback_urlcan be used for asynchronous completion notifications. - The skill validates credentials, runtime dependencies, target regions, and required parameters before execution.
- It selects the appropriate Azure workflow, such as IaC generation, deployment, compliance auditing, cost analysis, optimization, security scanning, monitoring, or resource management.
- The workflow invokes approved Python scripts, Azure SDK libraries, Azure CLI, and IaC tooling such as Bicep or Terraform.
- Results are collected from Azure APIs and command execution, with errors categorized as configuration, runtime, network, or service issues.
- The skill returns a structured response containing a status code, operation results, diagnostics, and execution logs.
- Generated artifacts such as Bicep templates, audit PDFs, cost spreadsheets, and security reports are written to the requested output location.
Azure Toolkit Pro Setup
- Use an AI agent that supports
SKILL.md, including Claude Code, Cursor, Codex, or Gemini CLI. - Install Python 3.9 or later and Azure CLI 2.0 or later. Bicep deployments require the Bicep CLI integration.
- Install the skill dependencies:
pip install -r requirements_pro.txt
pip install azure-identity azure-mgmt-compute azure-mgmt-resource
pip install azure-mgmt-monitor
- Install the required IaC tools:
# macOS example
brew install terraform
az bicep install
- Copy and edit the regional and service configuration:
cp config_pro_template.yaml config_pro.yaml
- Configure Azure service principal credentials securely through environment variables. The required values are
AZURE_SUBSCRIPTION_ID,AZURE_workspace_id,AZURE_CLIENT_ID, andAZURE_CLIENT_SECRET. Prefer environment-based or CI/CD secret storage and never commit credentials to source control. - Replace
<skill-script>below with the executable script supplied in the skill directory, then validate access with a read-only operation before creating or changing resources.
# Generate a multi-region Bicep template
python3 <skill-script> generate \
--template "web_app_ha" \
--engine "bicep" \
--regions "eastus,westus2" \
--output ./bicep/
# Deploy the generated infrastructure
python3 <skill-script> deploy \
--template ./bicep/main.bicep \
--parameters params.json \
--location eastus
# Run a compliance audit
python3 <skill-script> run \
--standards "CIS,Azure-Security-Benchmark,ISO27001" \
--output audit_report.pdf
# Analyze and optimize costs without applying changes
python3 <skill-script> analyze --period "3m" --output cost_report.xlsx
python3 <skill-script> optimize --apply-recommendations --dry-run
# Run a security scan
python3 <skill-script> scan --output security_report.pdf
Review Azure permissions, region availability, billing implications, and the skill's safety requirements before enabling write or deployment operations.
Azure Toolkit Pro Data Schema & Taxonomy
The skill uses parameterized inputs, configuration files, and structured execution responses.
| Data area | Format or field | Purpose |
|---|---|---|
| Primary request | input string |
Required natural-language instruction or Azure operation request |
| Optional configuration | options object |
Execution mode, formatting preferences, regions, standards, and workflow options |
| Async notification | callback_url string |
Optional completion callback for long-running operations |
| Region topology | YAML regions |
Primary and secondary Azure regions for deployment and disaster recovery |
| Infrastructure | YAML infrastructure |
IaC engine, state backend, and state storage configuration |
| Service inventory | YAML services |
Compute, database, storage, networking, security, monitoring, and analytics selections |
| Governance | YAML audit |
Compliance standards, audit schedule, and Azure Policy enablement |
| Cost controls | YAML cost |
Analysis period, recommendations, monthly budget, and alert threshold |
| Security controls | YAML security |
Scan frequency, Defender for Cloud, and vulnerability scanning settings |
| Recovery policy | YAML disaster_recovery |
Enablement, RPO, RTO, and cross-region recovery settings |
| Execution response | Status, result, logs | Structured outcome for each operation, including diagnostics |
Common generated artifacts include ./bicep/ templates, deployment parameter files, audit_report.pdf, cost_report.xlsx, and security_report.pdf. The taxonomy covers Azure service domains such as compute, storage, networking, databases, security, monitoring, AI/ML, and analytics. Resource credentials, API keys, and tokens should not appear in generated output or logs.
Azure Toolkit Pro Advanced Features
- Supports 30+ Azure service areas, including VMs, Functions, AKS, Container Apps, Storage, Data Lake, Blob, VNet, Load Balancer, Application Gateway, Traffic Manager, SQL Database, Cosmos DB, Redis, Key Vault, Entra ID, Defender, Sentinel, Monitor, Application Insights, Log Analytics, Cognitive Services, Machine Learning, Synapse, Databricks, and Stream Analytics.
- Generates infrastructure as code with Bicep, Terraform, or ARM and supports reusable, parameterized deployment templates.
- Performs multi-region batch deployment and cross-region disaster recovery with configurable RPO and RTO targets.
- Integrates Azure Policy and recurring compliance checks for CIS, Azure Security Benchmark, ISO 27001, and SOC 2.
- Provides cost trend analysis, idle-resource detection, reserved-instance guidance, budget alerts, estimated savings, and dry-run optimization.
- Integrates Azure Monitor, Application Insights, and Log Analytics with custom alert rules and dashboards.
- Supports daily security scanning, Defender for Cloud integration, vulnerability detection, encryption controls, and sensitive-data redaction.
- Uses structured error handling for configuration, runtime, network, and connectivity failures.
- Supports create, query, and export operations through the
input_paramsworkflow. - Provides compatibility with free-edition commands and configuration while adding enterprise automation capabilities.
- Exposes read, exec, and write tools for controlled file handling, command execution, and IaC artifact generation.
- Supports service-principal authentication for repeatable CI/CD and Openclaw Skills automation workflows.
- Includes operational safeguards such as approved-command execution, HTTPS communication, SSL validation, and explicit warnings about unauthorized security assessments and cloud charges.
SKILL.md
Loading
Related Openclaw Skills
Diagram Tools Pro
Diagram Tools Pro uses natural-language AI Agent commands to create, render, export, version, and manage enterprise diagrams at scale.
Document Reasoning Analyst Pro
A professional AI document reasoning skill that turns complex commercial and legal text into structured risk analysis, revisions, comparisons, and decision-ready reports.
Docker Essentials Tool Pro
An enterprise Docker operations skill for optimizing images, scanning vulnerabilities, managing Swarm clusters, automating container maintenance, and integrating CI/CD workflows.
Docker Sandbox Tool Pro
Docker Sandbox Tool Pro provides isolated, auditable, and policy-driven Docker environments for enterprise security testing and malware analysis.
SocialDataX TikTok Data Assistant
A read-only TikTok research skill for discovering posts, analyzing comments, and exploring creator profiles with SocialDataX.
Voice Setup
Voice Setup turns a writer's samples, interview answers, or both into an editable and enforceable writing voice profile.
Featured*
