Terravision Cloud Diagrams
patrickchugh/terravision
Draw cloud architecture diagrams for AWS, Azure or GCP with the official provider icon sets, using TerraVision.
ANALYSIS SKILL — List, find, and visualize Azure resources via Resource Graph or Mermaid.
Install Apex Azure Resources
$ npx skills add jonathan-vella/apex --skill apex-azure-resources -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install jonathan-vella/apex apex-azure-resources --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.github/skills/apex-azure-resources .claude/skills/apex-azure-resources && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "apex-azure-resources" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-resources into .claude/skills/apex-azure-resources/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-resources", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-resourcesType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add jonathan-vella/apex --skill apex-azure-resources -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install jonathan-vella/apex apex-azure-resources --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.github/skills/apex-azure-resources .agents/skills/apex-azure-resources && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "apex-azure-resources" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-resources into .agents/skills/apex-azure-resources/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-resources", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add jonathan-vella/apex --skill apex-azure-resources -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install jonathan-vella/apex apex-azure-resources --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.github/skills/apex-azure-resources .cursor/skills/apex-azure-resources && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "apex-azure-resources" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-resources into .cursor/skills/apex-azure-resources/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-resources", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/jonathan-vella/apex.git --path .github/skills/apex-azure-resources--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add jonathan-vella/apex --skill apex-azure-resources -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install jonathan-vella/apex apex-azure-resources --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.github/skills/apex-azure-resources .gemini/skills/apex-azure-resources && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "apex-azure-resources" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-resources into .gemini/skills/apex-azure-resources/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-resources", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install jonathan-vella/apex apex-azure-resourcesInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add jonathan-vella/apex --skill apex-azure-resources -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .github/skills && cp -r skills-src/.github/skills/apex-azure-resources .github/skills/apex-azure-resources && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "apex-azure-resources" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-resources into .github/skills/apex-azure-resources/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-resources", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add jonathan-vella/apex --skill apex-azure-resources -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install jonathan-vella/apex apex-azure-resources --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.github/skills/apex-azure-resources .opencode/skills/apex-azure-resources && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "apex-azure-resources" agent skill from https://github.com/jonathan-vella/apex/tree/main/.github/skills/apex-azure-resources into .opencode/skills/apex-azure-resources/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "apex-azure-resources", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
apex-azure-resources- GitHub stars
- 217
- Token cost
- ~2k tokens
- SKILL.md length
- 747 words
- Files
- 6 (incl. references, assets)
- Skills in repo
- 39
- Repo updated
- First seen
- Licence
- MIT
At a glance
ANALYSIS SKILL — List, find, and visualize Azure resources via Resource Graph or Mermaid.
- : deploys (apex-azure-deploy)
- SKILL.md covers Prerequisites, When to Use Lookup, Quick Reference and MCP Tools, plus 6 more sections
- Calls az
- Cost (apex-azure-cost-optimization)
What it does
Apex Azure Resources is an agent skill from jonathan-vella/apex. ANALYSIS SKILL — List, find, and visualize Azure resources via Resource Graph or Mermaid. WHEN: 'list resources', 'list VMs', 'find orphaned resources', 'resource inventory', 'cross-subscription query', 'visualize Azure resources', 'diagram my resources'. DO NOT USE FOR: deploys (apex-azure-deploy), cost (apex-azure-cost-optimization), security (apex-azure-compliance), troubleshooting (apex-azure-diagnostics).
Its SKILL.md is about 2k tokens, which your agent loads only when the skill is triggered. The skill folder holds 7 other files, including reference files and assets (for example `assets/example-diagram.md`, `assets/template-architecture.md` and `references/azure-resource-graph.md`).
It sits in DevOps & Cloud, covering Diagrams. It works with Microsoft Azure and Mermaid. The repository describes itself as: APEX turns Azure platform engineering requirements into verified, deploy-ready IaC — powered by GitHub Copilot agents, real-time pricing, and built-in compliance. The licence is MIT.
When your agent uses it
- : deploys (apex-azure-deploy)
- Cost (apex-azure-cost-optimization)
- Security (apex-azure-compliance)
- Troubleshooting (apex-azure-diagnostics)
Example prompts
- “list resources”
- “list VMs”
- “find orphaned resources”
- “/apex-azure-resources”
What it can do on your machine
Read from SKILL.md and the folder at commit b8e5908. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
az
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use az, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Apex Azure Resources loads about 2k tokens when it runs, and up to ~5.7k if it reads all its reference files. Until then it costs about 110 tokens; SKILL.md has 747 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from jonathan-vella/apex at commit b8e5908, republished under its MIT licence (© jonathan-vella). 747 words, ~2,021 tokens.
Download SKILL.mdSave it as
.claude/skills/apex-azure-resources/SKILL.md (or your agent's skills folder). This skill also uses 5 other files; get the full folder from GitHub.- name
- apex-azure-resources
- description
- **ANALYSIS SKILL** — List, find, and visualize Azure resources via Resource Graph or Mermaid. WHEN: 'list resources', 'list VMs', 'find orphaned resources', 'resource inventory', 'cross-subscription query', 'visualize Azure resources', 'diagram my resources'. DO NOT USE FOR: deploys (apex-azure-deploy), cost (apex-azure-cost-optimization), security (apex-azure-compliance), troubleshooting (apex-azure-diagnostics).
- user-invocable
- true
- disable-model-invocation
- false
- argument-hint
- resource scope and inventory query
- license
- MIT
- metadata.author
- Microsoft
- metadata.version
- 1.0.0
Azure Resources
Discover, inventory, and visualize existing Azure resources. Combines two related capabilities:
- Lookup mode — query and list resources (single type or cross-cutting via
Azure Resource Graph). Replaces the legacy
azure-resource-lookupskill. - Visualize mode — analyze a resource group and generate a detailed Mermaid
architecture diagram. Replaces the legacy
azure-resource-visualizerskill.
Both modes share references/azure-resource-graph.md for KQL patterns.
Prerequisites
Confirm authorized subscription IDs and read access. Use installed Azure CLI with Resource Graph support or an available MCP tool; tool names below are routing hints, not proof of runtime availability. Installation requires authorization.
Mode A: Lookup
Use this mode when the user wants to list / find / show Azure resources.
When to Use Lookup
- List resources of any type (VMs, web apps, storage accounts, container apps, databases, etc.)
- Show resources in a specific subscription or resource group
- Query resources across multiple subscriptions or resource types
- Find orphaned resources (unattached disks, unused NICs, idle IPs)
- Discover resources missing required tags or configurations
- Get a resource inventory spanning multiple types
- Find resources in a specific state (unhealthy, failed provisioning, stopped)
- Answer "what resources do I have?" or "show me my Azure resources"
- List web apps, websites or App Services — there is no dedicated MCP
listcommand for App Service, so these prompts go to Azure Resource Graph
💡 Tip: For single-resource-type queries, first check if a dedicated MCP tool can handle it (see routing table below). If none exists, use Azure Resource Graph (ARG).
Quick Reference
| Property | Value |
|---|---|
| Query Language | KQL (Kusto Query Language subset) |
| CLI Command | az graph query -q "<KQL>" -o table |
| Extension | az extension add --name resource-graph |
| MCP Tool | extension_cli_generate with intent for az graph query |
| Best For | Cross-subscription queries, orphaned resources, tag audits |
MCP Tools
| Tool | Purpose | When to Use |
|---|---|---|
extension_cli_generate | Generate az graph query commands | Primary — generate ARG queries from user intent |
mcp_azure-mcp_subscription_list | List available subscriptions | Discover subscription scope before querying |
mcp_azure-mcp_group_list | List resource groups | Narrow query scope |
Rules
- Prefer dedicated MCP tools for single-resource-type queries (
compute,storage,cosmos, etc.) before falling back to Azure Resource Graph - Use ARG for cross-cutting queries — cross-subscription, cross-type, orphaned resources, tag audits
- Generate queries via
extension_cli_generate— do not hand-author KQL when intent-based generation is available - Shape output with
--queryJMESPath for tabular display; do not load raw JSON dumps into context - Mode A is read-only — lookup never modifies resources; remediation is out of scope (use
apex-azure-deploy) - Mode B (Visualize) is for documentation — emit Mermaid only when the user explicitly asks for a diagram; do not auto-visualize lookup results
- No secrets in diagrams or inventories — represent keys, connection strings and Key Vault secrets with placeholder names only; never copy values from app settings or outputs
- Out of scope: deploying resources (use
apex-azure-deploy), cost optimization (useapex-azure-cost-optimization), security scanning (useapex-azure-compliance), troubleshooting (useapex-azure-diagnostics)
Show full SKILL.md (289 more words)Show less
Lookup Workflow
Three-step procedure: (1) check for a dedicated MCP tool by resource type
(compute / storage / cosmos / keyvault / sql / acr / aks /
appservice / eventhubs / servicebus); (2) if no full-coverage tool, generate an
Azure Resource Graph query via extension_cli_generate; (3) execute with --query
JMESPath shaping. Full per-resource-type tool table and example commands in
references/lookup-workflow.md.
Lookup Constraints
- ✅ Always use
=~for case-insensitive type matching (types are lowercase) - ✅ Always scope queries with
--subscriptions;--firstlimits rows, not authorization scope - ✅ Prefer dedicated MCP tools for single-resource-type queries
- ❌ Never use ARG for real-time monitoring (data has slight delay)
- ❌ Never attempt mutations through ARG (read-only)
Lookup Error Handling
| Error | Cause | Fix |
|---|---|---|
resource-graph extension not found | Extension not installed | az extension add --name resource-graph |
AuthorizationFailed | No read access to subscription | Check RBAC — need Reader role |
BadRequest on query | Invalid KQL syntax | Verify table/column names; use =~ for case-insensitive match |
| Empty results | No matching resources or wrong scope | Check --subscriptions flag; verify resource type spelling |
Mode B: Visualize
Use this mode when the user asks for a diagram of a resource group, or to understand how individual resources fit together.
When to Use Visualize
The user wants to:
- Create an architecture diagram of an existing resource group
- See how resources connect (VNets, private endpoints, identities, app settings)
- Document deployed infrastructure with embedded Mermaid
For the full Visualize-mode procedure (resource discovery, diagram construction, file creation, quality standards, constraints, edge cases, and output format), load references/visualize.md.
Reference Index
Load these on demand — do NOT read all at once:
| Reference | Mode | When to Load |
|---|---|---|
references/azure-resource-graph.md | Both | KQL patterns, ARG query examples |
| Lookup workflow | Lookup | Dedicated-tool routing and scoped ARG fallback |
references/visualize.md | Visualize | Full Visualize-mode workflow (Steps 2–4, constraints) |
assets/example-diagram.md | Visualize | Sample completed Mermaid architecture diagram |
assets/template-architecture.md | Visualize | Markdown template for the generated documentation |
© jonathan-vella, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 5 other files (references, assets) in .github/skills/apex-azure-resources of jonathan-vella/apex.
- SKILL.md
- assets/example-diagram.md
- assets/template-architecture.md
- references/azure-resource-graph.md
- references/lookup-workflow.md
- references/visualize.md
Open the folder on GitHubat commit b8e5908
Compare with similar skills
Apex Azure Resources next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Apex Azure Resources this skilljonathan-vella/apex | 217 | — | ~2k | Automated safety check: Pass | MIT | |
| Terravision Cloud Diagramspatrickchugh/terravision | 1.6k | — | ~5.6k | Automated safety check: Notes | AGPL-3.0-only | |
| Drawio MCP Diagrammingthomast1906/github-copilot-agent-skills | 202 | — | ~6.6k | Automated safety check: Pass | None | |
| Azv Diagram Azure SyncAzure/AZVerify | 101 | — | ~3.7k | Automated safety check: Pass | MIT | |
| Azv Diagram Azure Sync DeepAzure/AZVerify | 101 | — | ~3.9k | Automated safety check: Pass | MIT | |
| Azure Resource Visualizergithub/awesome-copilot | 40k | 1 repos | ~2.4k | Automated safety check: Pass | MIT |
Similar skills
Drawio MCP Diagramming
thomast1906/github-copilot-agent-skills
Create and edit diagrams using the Draw.io MCP server — any shape, any vendor.
- Official
Azv Diagram Azure Sync
Azure/AZVerify
Compare a Draw.io Azure architecture diagram against a live Azure environment to detect drift.
- Official
Azv Diagram Azure Sync Deep
Azure/AZVerify
Deep-compare a Draw.io Azure architecture diagram against a live Azure environment — checks both resource existence AND every tracked configuration property (SKU, size, settings, etc.) against…
- Official
Azure Resource Visualizer
github/awesome-copilot
Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the relationships between individual resources.
- Official
Azure Resource Visualizer
microsoft/GitHub-Copilot-for-Azure
Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the relationships between individual resources.
More from jonathan-vella/apex
All 39 skills in this repoApex Azure Diagnostics
jonathan-vella/apex
WORKFLOW SKILL — Debug Azure production issues: Container Apps, Functions, App Service, AKS, VMs and messaging, with KQL log analysis.
Apex Azure Governance Discovery
jonathan-vella/apex
ANALYSIS SKILL — Azure Policy discovery: effective assignments (incl.
Apex Context Management
jonathan-vella/apex
UTILITY SKILL — Two-mode context-window management. An agent skill from jonathan-vella/apex.
Apex Python Diagrams
jonathan-vella/apex
UTILITY SKILL — Python diagram generation for Azure architectures, WAF/cost/compliance charts, ERDs, swimlanes, timelines, and wireframes.
Apex Terraform Search Import
jonathan-vella/apex
WORKFLOW SKILL — Manual-only discovery and import of existing Azure resources into Terraform management.
Apex Vendor Prompting
jonathan-vella/apex
ANALYSIS SKILL — Manual-only audit of Anthropic Claude Opus 5.5 / Sonnet 5.5 and OpenAI GPT-6 / GPT-5.6 prompting guidance and APEX conventions.
Related
Works with
Categories
Questions about Apex Azure Resources
What does Apex Azure Resources do?
ANALYSIS SKILL — List, find, and visualize Azure resources via Resource Graph or Mermaid. Apex Azure Resources is an agent skill from jonathan-vella/apex. ANALYSIS SKILL — List, find, and visualize Azure resources via Resource Graph or Mermaid.
When should I use Apex Azure Resources?
Apex Azure Resources fits situations like: : deploys (apex-azure-deploy); cost (apex-azure-cost-optimization); security (apex-azure-compliance); troubleshooting (apex-azure-diagnostics).
How do I install Apex Azure Resources in Claude Code?
Run `npx skills add jonathan-vella/apex --skill apex-azure-resources -a claude-code`. Or copy the skill folder (.github/skills/apex-azure-resources in jonathan-vella/apex) into .claude/skills/apex-azure-resources in your project. Claude Code loads it when a task matches its description.
How do I install Apex Azure Resources in Codex?
Run `npx skills add jonathan-vella/apex --skill apex-azure-resources -a codex`. Or copy the skill folder (.github/skills/apex-azure-resources in jonathan-vella/apex) into .agents/skills/apex-azure-resources in your project. Codex loads it when a task matches its description.
Can I use Apex Azure Resources in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jonathan-vella/apex --skill apex-azure-resources -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/apex-azure-resources, .gemini/skills/apex-azure-resources, .github/skills/apex-azure-resources and .opencode/skills/apex-azure-resources in your project.
What does Apex Azure Resources need to run?
Going by SKILL.md and its folder, Apex Azure Resources needs the command-line tools its instructions call (az).
Does Apex Azure Resources access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Apex Azure Resources safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Apex Azure Resources use?
Apex Azure Resources is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Apex Azure Resources use?
About 2k tokens (SKILL.md is roughly 8.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 3.7k tokens, read only when the agent opens those files.
What are the alternatives to Apex Azure Resources?
Skills that share tags, products or a category with Apex Azure Resources: Terravision Cloud Diagrams (patrickchugh/terravision, 1.6k stars), Drawio MCP Diagramming (thomast1906/github-copilot-agent-skills, 202 stars), Azv Diagram Azure Sync (Azure/AZVerify, 101 stars) and Azv Diagram Azure Sync Deep (Azure/AZVerify, 101 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Apex Azure Resources?
jonathan-vella (a GitHub user) maintains it in jonathan-vella/apex, which has 217 GitHub stars. The repository holds 39 skills in this directory. The repository was last updated on October 10, 2026.
Source: jonathan-vella/apex on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.