Skill Registry
A single catalog of core skills and community skills reviewed through Azure/git-ape PRs under .github/community-skills/. Community metadata is included with core, but skill bodies are not. Search does not install or activate skills.
The raw, machine-readable version lives at .github/skills/registry.json and is regenerated by node scripts/generate-docs.js from core and community source directories.
First-Party Skills (16)​
| Skill | Tier | Author | Maturity | Description |
|---|---|---|---|---|
| Azure Cost Estimator | first-party | Microsoft | stable | Estimate monthly costs for Azure resources by querying the Azure Retail Prices API. Parses ARM templates to identify resources, SKUs, and regions, then looks up real retail pricing. Produces a per-resource cost breakdown with monthly totals. Use during template generation or when user asks about costs. |
| Azure Deployment Preflight | first-party | Microsoft | stable | Run preflight validation on ARM templates before deployment. Performs what-if analysis, permission checks, and generates a structured report with resource changes (create/modify/delete). Use before any deployment to preview changes and catch issues early. |
| Azure Drift Detector | first-party | Microsoft | stable | Detect configuration drift between deployed Azure resources and stored deployment state. Compare actual Azure configuration against desired state in .azure/deployments/, identify differences, and guide user through reconciliation options. Use when checking for manual changes, policy remediations, or unauthorized modifications. |
| Azure Integration Tester | first-party | Microsoft | stable | Run post-deployment integration tests for Azure resources. Verify Function Apps, Storage Accounts, Databases, App Services are healthy and accessible. Use after successful Azure deployment. |
| Azure Naming Research | first-party | Microsoft | stable | Research Azure naming constraints and CAF abbreviations for a given resource type. Use when you need to look up the official CAF slug, naming rules (length, scope, valid characters), and derive validation/cleaning regex patterns for an Azure resource. Triggers on: CAF abbreviation lookup, Azure naming rules research, resource naming constraints. |
| Azure Policy Advisor | first-party | Microsoft | stable | Assess ARM template resources for Azure Policy compliance. Analyse the template, query existing subscription assignments via az policy assignment list, identify unassigned built-in and custom policies (CIS, NIST, FedRAMP), and emit a two-part report: template-fixable gaps (Part 1) and subscription-level policy assignments (Part 2). USE FOR: recommending Azure Policy assignments for an ARM template, auditing a subscription against CIS/NIST/general best practices, deciding which initiatives to assign at sub or management-group scope, distinguishing template-fixable vs platform-level governance gaps. DO NOT USE FOR: per-resource security configuration assessment (use azure-security-analyzer), RBAC role recommendations (use azure-role-selector), CAF naming abbreviations (use azure-naming-research), or pricing estimates (use azure-cost-estimator). INVOKES: az policy assignment list, az policy set-definition list, microsoft_docs_search, microsoft_docs_fetch. |
| Azure Resource Availability | first-party | Microsoft | stable | Query live Azure APIs to validate resource availability before template generation or deployment. Checks VM SKU restrictions, Kubernetes/runtime version support, API version compatibility, and subscription quota. Use during requirements gathering and preflight to catch deployment failures early. |
| Azure Resource Visualizer | first-party | Microsoft | stable | Analyze deployed Azure resource groups and generate detailed Mermaid architecture diagrams showing relationships between resources. Use for post-deployment visualization, understanding existing infrastructure, or documenting live Azure environments. |
| Azure Rest Api Reference | first-party | Microsoft | stable | Look up Azure REST API and ARM template reference documentation for any resource type. Returns exact property schemas, required fields, valid values, and latest stable API versions. Use BEFORE generating or modifying ARM templates to ensure correctness. No Azure connection required. |
| Azure Role Selector | first-party | Microsoft | stable | Recommend least-privilege Azure RBAC roles for deployed resources. Finds minimal built-in roles matching desired permissions or creates custom role definitions. Use during security analysis or when configuring access for service principals and managed identities. |
| Azure Security Analyzer | first-party | Microsoft | stable | Analyze Azure resource configurations against security best practices using Azure MCP bestpractices service. Produces per-resource security assessment with severity ratings and recommendations. Use during template generation before deployment confirmation. |
| Azure Stack Deploy | first-party | Microsoft | stable | Run an Azure Deployment Stack create (subscription scope) for a prepared Git-Ape deployment artifact and write state.json (schemaVersion 1.0). Use locally so the result matches the CI deploy workflow. |
| Azure Stack Destroy | first-party | Microsoft | stable | Tear down a Git-Ape deployment by ID. Reads state.json under .azure/deployments/<id>/ to delete the Azure Deployment Stack and purge soft-deleted Key Vault / Cognitive Services. Refuses to run without state.json. Use for any local CLI or VS Code Git-Ape teardown so the result matches the CI destroy workflow. |
| Git Ape Onboarding | first-party | Microsoft | stable | Bootstrap a GitHub repository for Git-Ape CI/CD: Entra app registration, OIDC federated credentials, RBAC role assignments, GitHub environments (azure-deploy/azure-destroy), required secrets, and scaffold Actions workflow files — plus enterprise-wide distribution via a .github-private repo (managed-settings.json plugin standards + custom agents). USE FOR: first-time Git-Ape setup, new subscription onboarding, multi-environment (dev/staging/prod) setup, configure OIDC, federated credentials, RBAC setup, GitHub environments, scaffold workflow files, rolling Git-Ape out org/enterprise-wide. DO NOT USE FOR: deploying resources (use git-ape), drift detection alone, secret rotation. |
| Git Ape Skills | first-party | Microsoft | stable | Search Git-Ape core skills, community skills, and named packs, or explicitly install community skills and packs from Azure/git-ape for this project or all your projects. USE FOR: find a skill, search capabilities, list community skills or packs, install a community skill or pack. DO NOT USE FOR: automatically installing search results, global plugin installation, or invoking skills not available in the current session. |
| Prereq Check | first-party | Git-Ape | stable | Validate Git-Ape CLI tool installation (az, gh, jq, git), versions, and auth sessions. Shows platform-specific install commands for anything missing. USE FOR: check Git-Ape prerequisites, what do I need to install for Git-Ape, verify Git-Ape CLI tools, az: command not found, gh: command not found, jq: command not found, git: command not found, az missing, gh missing, jq missing, git missing, fresh machine setup for Git-Ape, dev container setup for Git-Ape, before running git-ape-onboarding, az login required, gh auth login, auth expired, not logged in, outdated az version, minimum az version, upgrade az. DO NOT USE FOR: Anything else. This skill is narrowly scoped to prerequisites checks for Git-Ape's CLI tools and auth sessions. Do not use it for any other purpose. |
Community Skills (35)​
Community skills are maintained by their listed authors. Review provides oversight, not a guarantee of safety. Use /git-ape-skills search <query> to search local registry metadata (not installed status) and /git-ape-skills install <name> to explicitly copy a selected skill from a pinned Azure/git-ape revision for this project or all your projects. Choose scope before any project folder question; preview and approve the resolved destination and files using the discovery helper. Scripts and references are copied too; existing files are never overwritten.
| Skill | Tier | Author | Maturity | Description |
|---|---|---|---|---|
| Aws Api Gateway | community | dawright22 | experimental | AWS API Gateway for REST and HTTP API management. Use when creating APIs, configuring integrations, setting up authorization, managing stages, implementing rate limiting, or troubleshooting API issues. |
| Aws Bedrock | community | dawright22 | experimental | AWS Bedrock foundation models for generative AI. Use when invoking foundation models, building AI applications, creating embeddings, configuring model access, or implementing RAG patterns. |
| Aws Cloudformation | community | dawright22 | experimental | AWS CloudFormation infrastructure as code for stack management. Use when writing templates, deploying stacks, managing drift, troubleshooting deployments, or organizing infrastructure with nested stacks. |
| Aws Cloudwatch | community | dawright22 | experimental | AWS CloudWatch monitoring for logs, metrics, alarms, and dashboards. Use when setting up monitoring, creating alarms, querying logs with Insights, configuring metric filters, building dashboards, or troubleshooting application issues. |
| Aws Cognito | community | dawright22 | experimental | AWS Cognito user authentication and authorization service. Use when setting up user pools, configuring identity pools, implementing OAuth flows, managing user attributes, or integrating with social identity providers. |
| Aws Cost Estimator | community | dawright22 | experimental | Estimate monthly costs for AWS resources using the AWS Pricing API. Parses CloudFormation templates to identify resources, service types, and regions, then looks up real AWS retail pricing. Produces a per-resource cost breakdown with monthly totals. Use during template generation or when user asks about costs. |
| Aws Dynamodb | community | dawright22 | experimental | AWS DynamoDB NoSQL database for scalable data storage. Use when designing table schemas, writing queries, configuring indexes, managing capacity, implementing single-table design, or troubleshooting performance issues. |
| Aws Ec2 | community | dawright22 | experimental | AWS EC2 virtual machine management for instances, AMIs, and networking. Use when launching instances, configuring security groups, managing key pairs, troubleshooting connectivity, or automating instance lifecycle. |
| Aws Ecs | community | dawright22 | experimental | AWS ECS container orchestration for running Docker containers. Use when deploying containerized applications, configuring task definitions, setting up services, managing clusters, or troubleshooting container issues. |
| Aws Eks | community | dawright22 | experimental | AWS EKS Kubernetes management for clusters, node groups, and workloads. Use when creating clusters, configuring IRSA, managing node groups, deploying applications, or integrating with AWS services. |
| Aws Eventbridge | community | dawright22 | experimental | AWS EventBridge serverless event bus for event-driven architectures. Use when creating rules, configuring event patterns, setting up scheduled events, integrating with SaaS, or building cross-account event routing. |
| Aws Iam | community | dawright22 | experimental | AWS Identity and Access Management for users, roles, policies, and permissions. Use when creating IAM policies, configuring cross-account access, setting up service roles, troubleshooting permission errors, or managing access control. |
| Aws Lambda | community | dawright22 | experimental | AWS Lambda serverless functions for event-driven compute. Use when creating functions, configuring triggers, debugging invocations, optimizing cold starts, setting up event source mappings, or managing layers. |
| Aws Naming Research | community | dawright22 | experimental | Research AWS resource naming conventions and constraints for a given service. Use when you need to look up naming rules (length, valid characters, scope), recommended patterns, and uniqueness requirements for AWS resources. Triggers on: AWS naming rules research, resource naming constraints, S3 bucket name validation. |
| Aws Rds | community | dawright22 | experimental | AWS RDS relational database service for managed databases. Use when provisioning databases, configuring backups, managing replicas, troubleshooting connectivity, or optimizing performance. |
| Aws S3 | community | dawright22 | experimental | AWS S3 object storage for bucket management, object operations, and access control. Use when creating buckets, uploading files, configuring lifecycle policies, setting up static websites, managing permissions, or implementing cross-region replication. |
| Aws Secrets Manager | community | dawright22 | experimental | AWS Secrets Manager for secure secret storage and rotation. Use when storing credentials, configuring automatic rotation, managing secret versions, retrieving secrets in applications, or integrating with RDS. |
| Aws Security Analyzer | community | dawright22 | experimental | Analyze CloudFormation templates and AWS resource configurations against security best practices. Produces per-resource security assessment with severity ratings. Use during template generation before deployment confirmation or to audit existing AWS configurations. |
| Aws Sns | community | dawright22 | experimental | AWS SNS notification service for pub/sub messaging. Use when creating topics, managing subscriptions, configuring message filtering, sending notifications, or setting up fan-out patterns. |
| Aws Sqs | community | dawright22 | experimental | AWS SQS message queue service for decoupled architectures. Use when creating queues, configuring dead-letter queues, managing visibility timeouts, implementing FIFO ordering, or integrating with Lambda. |
| Aws Step Functions | community | dawright22 | experimental | AWS Step Functions workflow orchestration with state machines. Use when designing workflows, implementing error handling, configuring parallel execution, integrating with AWS services, or debugging executions. |
| Csd Assessment Report | community | dawright22 | experimental | Assesses ISV readiness for Microsoft Solutions Partner with Certified Software Designations (CSD). Evaluates Marketplace readiness, technical interoperability, customer success metrics, and Industry AI alignment. Generates a print-ready HTML report (save as PDF). Use when assessing CSD readiness for Azure, Business Applications, Modern Work, Security, or Industry AI designations. |
| Deployment Blueprints | community | dawright22 | experimental | Provides implementation blueprints and deployment sequencing for Azure SaaS reference topologies. |
| Fulfillment And Metering | community | dawright22 | experimental | Implements Azure Marketplace SaaS fulfillment APIs and metered billing event flows for transactable offers. |
| Isv Landing Zone Foundation | community | dawright22 | experimental | Builds the Azure ISV landing zone baseline for identity, networking, governance, security, and environment separation. |
| Marketplace Offer Types | community | dawright22 | experimental | Provides offer-type decision guidance and implementation pathways for Azure Marketplace and related commercial offer models. |
| Marketplace Onboarding | community | dawright22 | experimental | Guides onboarding to Azure Marketplace: publisher setup, technical configuration, validation, and launch readiness. |
| Multi Tenant Saas | community | dawright22 | experimental | Primary orchestration skill for building a multi-tenant Azure SaaS platform, integrating ISV landing zone guidance, SaaS Accelerator patterns, and marketplace publication workflows. |
| Onboard To Marketplace | community | dawright22 | experimental | End-to-end onboarding flow for Azure Marketplace SaaS publication, from Partner Center readiness to final go-live checks. |
| Saas Accelerator Bootstrap | community | dawright22 | experimental | Bootstraps and customizes the Azure Commercial Marketplace SaaS Accelerator as a starting point for transactable SaaS offers. |
| Saas Assessment Report | community | dawright22 | experimental | Orchestrates a comprehensive SaaS platform assessment against WAF, CAF, CIS, NIST, PCI-DSS, HIPAA, SOC 2, FedRAMP, and SaaS maturity frameworks. Generates a print-ready HTML report (save as PDF from browser). Use when the user wants to assess a SaaS repo, generate a compliance report, or audit an Azure SaaS platform. |
| Scale And Sre | community | dawright22 | experimental | Implements production scale, reliability, and observability patterns for multi-tenant SaaS platforms. |
| Security And Compliance | community | dawright22 | experimental | Defines security architecture and compliance controls for multi-tenant SaaS, including identity, secrets, data protection, and auditability. |
| Tenant Isolation Models | community | dawright22 | experimental | Designs and validates tenancy models (shared, pooled, siloed, hybrid) with security, cost, and scale trade-offs. |
| Tenant Lifecycle Automation | community | dawright22 | experimental | Implements automated tenant onboarding, provisioning, upgrade, suspension, and offboarding workflows. |
Community Packs (1)​
Named packs are explicit lists of independent community skills, not merged skills or loader groups. See the pack catalog for membership and pinned project or personal installation.
Contributing to the Registry​
- First-party skills live under
.github/skills/<name>/SKILL.mdand are maintained by the Git-Ape team. - Community skills live under
.github/community-skills/<name>/SKILL.mdand are contributed via PR, following the same contribution guidelines and CI checks as core skills. Their source directory is outside the core loader path and excluded from the VSIX.
Both tiers are picked up automatically — no manual registration step is required beyond adding the SKILL.md file with valid frontmatter.