azure-arg-external-evaluation-policy-author

azure-arg-external-evaluation-policy-author is a Cloud platforms skill for AI agents, published by Azure in the azure-policy repository on GitHub. Skillspace rates azure-arg-external-evaluation-policy-author D (67/100) and it passed the safety scan; the rating is based on static analysis only.

Use when the user wants to author, design, or test an Azure Policy that queries Azure Resource Graph (ARG) at request-time — i.e. a policy whose deny/audit decision depends on data from elsewhere in the subscription (sibling/parent resource state, RG-wide invariants, multi-hop relationships, etc.). Formally called Azure Policy External Evaluation; sometimes referred to colloquially as "Invoke". Drives an iterative KQL co-design loop against the user's real subscription via `az graph query`, then emits a policy definition, assignment, `.http` test flow, and an `EXPLANATION.md` companion. Read-only; never provisions anything.

Grade
D
Quality
67 / 100
Safety
Passed
GitHub stars
1,686

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Our review

Architecture
94 / 100
Maturity
Structured: ships references or scripts
Security scan
Low-risk patterns
License
MIT
Adoption
Adopted by 0 other repositories, in 0 collections
Scope
Vendor-specific: built around one product. Authoring Azure Policy external evaluation against Azure Resource Graph

What the scanner flagged

  • mentions secrets in text

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.