Official agent skill

Sdaf Sovereign Cloud

Explain the current SDAF sovereign-cloud deltas without inventing a generic "all sovereigns" runbook.

OfficialMITAuto-check passedDevOps & Cloud

Install Sdaf Sovereign Cloud

skills CLI

$ npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install Azure/sap-automation sdaf-sovereign-cloud --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/Azure/sap-automation.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/sdaf-sovereign-cloud .claude/skills/sdaf-sovereign-cloud && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "sdaf-sovereign-cloud" agent skill from https://github.com/Azure/sap-automation/tree/main/skills/sdaf-sovereign-cloud into .claude/skills/sdaf-sovereign-cloud/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sdaf-sovereign-cloud", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/Azure/sap-automation/tree/main/skills/sdaf-sovereign-cloud

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install Azure/sap-automation sdaf-sovereign-cloud --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/Azure/sap-automation.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/sdaf-sovereign-cloud .agents/skills/sdaf-sovereign-cloud && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "sdaf-sovereign-cloud" agent skill from https://github.com/Azure/sap-automation/tree/main/skills/sdaf-sovereign-cloud into .agents/skills/sdaf-sovereign-cloud/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sdaf-sovereign-cloud", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install Azure/sap-automation sdaf-sovereign-cloud --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/Azure/sap-automation.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/sdaf-sovereign-cloud .cursor/skills/sdaf-sovereign-cloud && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "sdaf-sovereign-cloud" agent skill from https://github.com/Azure/sap-automation/tree/main/skills/sdaf-sovereign-cloud into .cursor/skills/sdaf-sovereign-cloud/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sdaf-sovereign-cloud", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/Azure/sap-automation.git --path skills/sdaf-sovereign-cloud

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install Azure/sap-automation sdaf-sovereign-cloud --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/Azure/sap-automation.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/sdaf-sovereign-cloud .gemini/skills/sdaf-sovereign-cloud && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "sdaf-sovereign-cloud" agent skill from https://github.com/Azure/sap-automation/tree/main/skills/sdaf-sovereign-cloud into .gemini/skills/sdaf-sovereign-cloud/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sdaf-sovereign-cloud", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install Azure/sap-automation sdaf-sovereign-cloud

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/Azure/sap-automation.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/sdaf-sovereign-cloud .github/skills/sdaf-sovereign-cloud && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "sdaf-sovereign-cloud" agent skill from https://github.com/Azure/sap-automation/tree/main/skills/sdaf-sovereign-cloud into .github/skills/sdaf-sovereign-cloud/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sdaf-sovereign-cloud", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install Azure/sap-automation sdaf-sovereign-cloud --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/Azure/sap-automation.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/sdaf-sovereign-cloud .opencode/skills/sdaf-sovereign-cloud && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "sdaf-sovereign-cloud" agent skill from https://github.com/Azure/sap-automation/tree/main/skills/sdaf-sovereign-cloud into .opencode/skills/sdaf-sovereign-cloud/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sdaf-sovereign-cloud", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: sdaf-sovereign-cloud
GitHub stars: 146
Token cost: ~1.4k tokens
SKILL.md length: 552 words
Files: 2 (incl. references)
Skills in repo: 19
Repo updated: Oct 8, 2026
First seen: Oct 7, 2026
Licence: MIT

At a glance

Explain the current SDAF sovereign-cloud deltas without inventing a generic "all sovereigns" runbook.

A user says Azure Government
SKILL.md covers When to invoke, Scope boundary, Cloud values that must move… and Region and configuration…, plus 3 more sections
Needs ARM_CLIENT_SECRET
Sovereign cloud

What it does

Sdaf Sovereign Cloud is an agent skill from Azure/sap-automation, published by the product's own GitHub organization. Explain the current SDAF sovereign-cloud deltas without inventing a generic "all sovereigns" runbook. Focus on Azure Government only: the GitHub Actions cloud values ARMENVIRONMENT=usgovernment, AZUREENVIRONMENT=AzureUSGovernment, and AZUREAUDIENCE=api://AzureADTokenExchangeUSGov; the Government dnszonenames block; USAR / USTE / USVI; the 3.22+ image boundary; and the documented Government login, client-secret, SKU, and private-endpoint failure signatures. Use when a user says "Azure Government", "sovereign…

Its SKILL.md is about 1.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/documented-cloud-boundaries.md`).

It sits in DevOps & Cloud, covering Runbooks and postmortems and CI/CD. It works with Microsoft Azure and GitHub Actions. The repository describes itself as: This is the repository supporting the SAP deployment automation framework on Azure. The licence is MIT.

When your agent uses it

A user says Azure Government
Sovereign cloud
Government DNS zones
Generic stage execution

Example prompts

“all sovereigns”
“Azure Government”
“sovereign cloud”
“/sdaf-sovereign-cloud”

Requirements

A credential in ARM_CLIENT_SECRET
Pre-approved tools (allowed-tools): shell

What it can do on your machine

Read from SKILL.md and the folder at commit 78835f0. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves these tools, so the agent can use them without asking each time:
- shell
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are terraform).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names these keys or tokens, usually read from environment variables:
- ARM_CLIENT_SECRET
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Sdaf Sovereign Cloud loads about 1.4k tokens when it runs, and up to ~1.6k if it reads all its reference files. Until then it costs about 191 tokens; SKILL.md has 552 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~191
When it runs · the whole SKILL.md, loaded when a task matches: ~1.4k
With references · SKILL.md plus every file in references/, read only if the agent opens them: ~1.6k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from Azure/sap-automation at commit 78835f0, republished under its MIT licence (© Azure). 552 words, ~1,382 tokens.

Download SKILL.mdSave it as .claude/skills/sdaf-sovereign-cloud/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.

name: sdaf-sovereign-cloud
description: Explain the current SDAF sovereign-cloud deltas without inventing a generic "all sovereigns" runbook. Focus on Azure Government only: the GitHub Actions cloud values `ARM_ENVIRONMENT=usgovernment`, `AZURE_ENVIRONMENT=AzureUSGovernment`, and `AZURE_AUDIENCE=api://AzureADTokenExchangeUSGov`; the Government `dns_zone_names` block; `USAR` / `USTE` / `USVI`; the 3.22+ image boundary; and the documented Government login, client-secret, SKU, and private-endpoint failure signatures. Use when a user says "Azure Government", "sovereign cloud", "ARM_ENVIRONMENT", "AZURE_AUDIENCE", "AADSTS900382", "USVI", or "Government DNS zones". Do NOT use for generic stage execution or to infer Azure China / German procedures from cloud-name literals alone.
allowed-tools: shell
license: MIT

SDAF Sovereign Cloud

Context-primer. Explains the currently sourced sovereign-cloud deltas for SDAF without promising parity across every surface or Azure cloud. The operator path in scope is Azure Government. For exact anchors, commands, and ownership boundaries, see references/documented-cloud-boundaries.md.

When to invoke

Trigger on: "Azure Government", "sovereign cloud", "ARM_ENVIRONMENT", "AZURE_AUDIENCE", "AADSTS900382", "USVI", "Government dns_zone_names", "wrong azure/login cloud", "Government VM size not available".

Do NOT trigger on: generic control-plane/workload-zone/SAP-system deployment, a general private-endpoint policy design decision, or unsupported-cloud enablement.

Scope boundary

Teach only Azure Government deltas that current SDAF docs or code explicitly name.

CHANGELOG/v3.22.0.0 is the first release note in this repo that explicitly names Azure Government support in the GitHub Actions setup flow and adds USAR, USTE, and USVI.
The GitHub setup utility defines sovereign OIDC values only for AzureUSGovernment and rejects unknown clouds.
Local shell code also maps AzureChinaCloud and AzureGermanCloud, but that alone is not an end-to-end operator runbook.

If the operator asks for China, German, or another sovereign path, say the current sources in scope do not publish that runbook and stop.

Cloud values that must move together

For the GitHub Actions surface, set these together:

ARM_ENVIRONMENT = usgovernment
AZURE_ENVIRONMENT = AzureUSGovernment
AZURE_AUDIENCE = api://AzureADTokenExchangeUSGov

Workflow 00 copies these values to the control-plane environment; workflow 02 propagates them to workload environments.

Do not set only one or two of them:

AZURE_ENVIRONMENT and AZURE_AUDIENCE steer azure/login.
ARM_ENVIRONMENT steers the azurerm provider.
If Terraform later fails with AADSTS900382, first check that every Terraform step is exporting ARM_ENVIRONMENT with the ARM credentials.

Region and configuration boundaries

Government region codes are documented in docs/region-codes.md:

usgovarizona → USAR
usgovtexas → USTE
usgovvirginia → USVI

If a GitHub control-plane run shows Invalid index with an empty Region:, treat the pinned DOCKER_IMAGE as the first boundary check. The documented image gate for Government region codes is SDAF 3.22+.

For Azure Government generated WORKSPACES files, uncomment the Government dns_zone_names block. For Public Azure, leave it commented. Do not enable multiple DNS blocks.

For an Azure Government workload-zone deployment that fails with PrivateEndpointCannotBeCreatedInSubnetThatHasNetworkPoliciesEnabled, set:

terraform

private_endpoint_network_policies = "Disabled"

Do not generalize that workaround to other clouds. If the operator needs the broader workload-zone/network-policy decision, hand off to sdaf-workload-zone.

Show full SKILL.md (200 more words)Show less

Common documented Azure Government failure signatures

AADSTS900382 during Terraform init/apply: Terraform is still targeting the wrong cloud endpoint. Check ARM_ENVIRONMENT first.
azure/login succeeds against the wrong cloud: the workflow is missing AZURE_ENVIRONMENT and/or AZURE_AUDIENCE.
AADSTS7000215 or AADSTS700016: Terraform is not using the workflow's OIDC token. When USE_MSI=false, ARM_CLIENT_SECRET must exist and be valid in the running environment.
SkuNotAvailable: query the subscription's offered sizes in the target region and set the stage-specific size variable; for the control plane, that variable is deployer_size.

Hand-off

GitHub Actions bootstrap or workflow mechanics: use the GitHub surface plugin or the referenced GitHub bootstrap docs.
Local control-plane execution: sdaf-control-plane-bootstrap.
Workload-zone execution or the broader network-policy choice: sdaf-workload-zone.
SAP-system deployment: sdaf-sap-system.
Symptoms outside the documented Government cases above: sdaf-failure-triage.

Hard rules

Do not infer an end-to-end China or German runbook from cloud-name literals alone.
Do not apply Azure Government dns_zone_names or subnet-policy settings to Public Azure by default.
Do not treat ARM_ENVIRONMENT as sufficient for azure/login, or AZURE_ENVIRONMENT / AZURE_AUDIENCE as sufficient for Terraform.
Do not claim Local/ADO/GitHub sovereign-cloud parity unless the cited source for that surface says so.
If the question depends on an uncited cloud, surface, or workaround, say the current sources are silent and stop.

Files

SKILL.md and 1 other file (references) in skills/sdaf-sovereign-cloud of Azure/sap-automation.

SKILL.md
references/documented-cloud-boundaries.md

Open the folder on GitHubat commit 78835f0

Compare with similar skills

Sdaf Sovereign Cloud next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Sdaf Sovereign Cloud compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Sdaf Sovereign Cloud this skillAzure/sap-automation	146	—	~1.4k	Automated safety check: Pass	MIT	yesterday
Releasing Blancbnfy/blanc	113	—	~2.9k	Automated safety check: Notes	MIT	today
Prepare Cloudflare Production DeploymentLubomirGeorgiev/cloudflare-workers-nextjs-saas-template	786	—	~5.9k	Automated safety check: Notes	MIT	today
Azure Bicep Skilltimothywarner-org/claude-code	224	—	~2.9k	Automated safety check: Pass	MIT	2 mo ago
Nuget Trusted Publishingdotnet/skills	5.6k	2 repos	~2.3k	Automated safety check: Pass	MIT	today
Managing Workflow Secretsbitwarden/ai-plugins	155	—	~4k	Automated safety check: Pass	Custom licence	today

Similar skills

Releasing Blanc
bnfy/blanc
Full runbook for cutting a Blanc desktop release — scripts/release.sh mechanics and its required BLANCRELEASE env vars, macOS notarization via 1Password, the Touch ID provisioning profile and…
113 GitHub stars~2.9k tokensUpdated today
DevOps & CloudAuto-check: notes
Prepare Cloudflare Production Deployment
LubomirGeorgiev/cloudflare-workers-nextjs-saas-template
Source-of-truth runbook for preparing this Vinext Cloudflare Workers SaaS template for production deployment.
786 GitHub stars~5.9k tokensUpdated today
DevOps & CloudAuto-check: notes
Azure Bicep Skill
timothywarner-org/claude-code
A skill your agent uses when authoring, reviewing, or refactoring Azure Bicep code.
224 GitHub stars~2.9k tokensUpdated 2 mo ago
DevOps & CloudAuto-check passed
Nuget Trusted Publishing
dotnet/skills
Official
Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens.
5.6k GitHub starsUsed in 2 repos~2.3k tokens
DevOps & CloudAuto-check passed
Managing Workflow Secrets
bitwarden/ai-plugins
Official
Bitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions…
155 GitHub stars~4k tokensUpdated today
DevOps & CloudAuto-check passed
Azure Static Web Apps
github/awesome-copilot
Official
Helps create, configure, and deploy Azure Static Web Apps using the SWA CLI.
40k GitHub starsUsed in 1 repo~2.4k tokens
DevOps & CloudAuto-check passed

More from Azure/sap-automation

All 19 skills in this repo

Sdaf Bom Selection
Azure/sap-automation
Official
Pick the right SDAF BOM for a target SAP product / release / DB platform / version / kernel / topology.
146 GitHub stars~1.6k tokensUpdated yesterday
Auto-check passed
Sdaf Orientation And Surface
Azure/sap-automation
Official
Orient a newcomer to the SAP Deployment Automation Framework (SDAF): explain the spine (control plane → workload zone → SAP system → software → install → operate/remove), summarise the three…
146 GitHub stars~1.6k tokensUpdated yesterday
Auto-check passed
Sdaf Quality Assurance
Azure/sap-automation
Official
Validate a deployed SDAF SAP system through the SDAF-owned QA entry points: the local quality-assurance menu and the documented Azure DevOps pipeline 13 path.
146 GitHub stars~1.6k tokensUpdated yesterday
Auto-check passed
Sdaf Sap Installation
Azure/sap-automation
Official
Guide SDAF operating-system, database, and SAP installation after the SAP-system workspace and reviewed media are ready.
146 GitHub stars~1.5k tokensUpdated yesterday
Auto-check passed
Sdaf State Management
Azure/sap-automation
Official
Inspect and repair SDAF Terraform state safely before any reviewed import/remove.
146 GitHub stars~1.7k tokensUpdated yesterday
Auto-check passed
Sdaf Workspace And Tfvars
Azure/sap-automation
Official
Explain and validate the SDAF WORKSPACES layout (DEPLOYER / LIBRARY / LANDSCAPE / SYSTEM), the region-code naming convention, and how the four tfvars files hang off it.
146 GitHub stars~1.2k tokensUpdated yesterday
Auto-check passed

Works with

Questions about Sdaf Sovereign Cloud

What does Sdaf Sovereign Cloud do?

Explain the current SDAF sovereign-cloud deltas without inventing a generic "all sovereigns" runbook. Sdaf Sovereign Cloud is an agent skill from Azure/sap-automation, published by the product's own GitHub organization. Explain the current SDAF sovereign-cloud deltas without inventing a generic "all sovereigns" runbook.

When should I use Sdaf Sovereign Cloud?

Sdaf Sovereign Cloud fits situations like: A user says Azure Government; sovereign cloud; government DNS zones; generic stage execution.

How do I install Sdaf Sovereign Cloud in Claude Code?

Run `npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a claude-code`. Or copy the skill folder (skills/sdaf-sovereign-cloud in Azure/sap-automation) into .claude/skills/sdaf-sovereign-cloud in your project. Claude Code loads it when a task matches its description.

How do I install Sdaf Sovereign Cloud in Codex?

Run `npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a codex`. Or copy the skill folder (skills/sdaf-sovereign-cloud in Azure/sap-automation) into .agents/skills/sdaf-sovereign-cloud in your project. Codex loads it when a task matches its description.

Can I use Sdaf Sovereign Cloud in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Azure/sap-automation --skill sdaf-sovereign-cloud -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/sdaf-sovereign-cloud, .gemini/skills/sdaf-sovereign-cloud, .github/skills/sdaf-sovereign-cloud and .opencode/skills/sdaf-sovereign-cloud in your project.

What does Sdaf Sovereign Cloud need to run?

Going by SKILL.md and its folder, Sdaf Sovereign Cloud needs credentials named ARM_CLIENT_SECRET. Our summary lists: A credential in ARM_CLIENT_SECRET. Its frontmatter pre-approves these tools: shell.

Does Sdaf Sovereign Cloud access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Sdaf Sovereign Cloud safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Sdaf Sovereign Cloud use?

Sdaf Sovereign Cloud is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Sdaf Sovereign Cloud use?

About 1.4k tokens (SKILL.md is roughly 5.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 242 tokens, read only when the agent opens those files.

What are the alternatives to Sdaf Sovereign Cloud?

Skills that share tags, products or a category with Sdaf Sovereign Cloud: Releasing Blanc (bnfy/blanc, 113 stars), Prepare Cloudflare Production Deployment (LubomirGeorgiev/cloudflare-workers-nextjs-saas-template, 786 stars), Azure Bicep Skill (timothywarner-org/claude-code, 224 stars) and Nuget Trusted Publishing (dotnet/skills, 5.6k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Sdaf Sovereign Cloud?

Azure (a GitHub organization, an official publisher) maintains it in Azure/sap-automation, which has 146 GitHub stars. The repository holds 19 skills in this directory. The repository was last updated on October 8, 2026.

Source: Azure/sap-automation on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Sdaf Sovereign Cloud

Facts

At a glance

What it does

When your agent uses it

Example prompts

Requirements

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

SDAF Sovereign Cloud

When to invoke

Scope boundary

Cloud values that must move together

Region and configuration boundaries

Common documented Azure Government failure signatures

Hand-off

Hard rules

Files

Compare with similar skills

Similar skills

More from Azure/sap-automation

Related

Questions about Sdaf Sovereign Cloud