aap-lint
ansible-lint playbook and role validation — syntax checking, best practice enforcement, project-wide analysis, rule filtering. Use when validating Ansible playbooks, checking code quality, or enforcing automation best practices before deployment.
Works with
--- name: aap-lint description: ansible-lint playbook and role validation — syntax checking, best practice enforcement, project-wide analysis, rule filtering. Use when validating Ansible playbooks, checking code quality, or enforcing automation best practices before deployment. license: Apache-2.0 --- # Ansible Lint Operations ## MCP Server - **Repository**: [sibilleb/AAP-Enterprise-MCP-Server](https://github.com/sibilleb/AAP-Enterprise-MCP-Server) - **Transport**: stdio (Python via `uv run ansible-lint.py`) - **Install**: `git clone` + `uv sync` (or `pip install -e .`) - **Requires**: `ansible-lint` installed ## Available Tools (9) | Tool | What It Does | |------|-------------| | `lint_playbook` | Lint playbook content with configurable profiles and output formats | | `lint_file` | Lint a specific Ansible file at a given path | | `lint_role` | Comprehensive linting of an Ansible role directory | | `list_rules` | Display available ansible-lint rules with optional tag filtering | | `list_tags` | Show all tags for categorizing lint rules | | `validate_syntax` | Quick syntax validation using syntax-specific rules | | `check_best_practices` | Evaluate content against best practices with severity categorization | | `analyze_project` | Comprehensive report on an entire Ansible project structure | | `get_ansible_lint_version` | Return installed ansible-lint version | ## Key Concepts | Concept | What It Means | |---------|---------------| | **Profile** | Lint strictness level (min, basic, moderate, safety, shared, production) | | **Rule** | Individual lint check (e.g., `yaml[truthy]`, `no-changed-when`, `fqcn`) | | **Tag** | Rule category for filtering (e.g., `command-shell`, `formatting`, `idiom`) | | **FQCN** | Fully Qualified Collection Name — required in production profiles | ## Workflow: Pre-Deployment Playbook Validation 1. **Syntax check**: `validate_syntax` — catch YAML and Ansible syntax errors 2. **Best practices**: `check_best_practices` — evaluate against standards 3. **Full lint**: `lint_playbook` with production profile — comprehensive check 4. **Review rules**: `list_rules` — understand which rules triggered violations 5. **Report**: Pass/fail with specific violations and remediation guidance ## Workflow: Project-Wide Quality Audit 1. **Analyze project**: `analyze_project` — scan entire Ansible project structure 2. **Review findings**: Group violations by file, rule, and severity 3. **Check roles**: `lint_role` for each role directory 4. **Report**: Project quality scorecard with violation counts and trends ## Integration with Other Skills | Skill | How They Work Together | |-------|----------------------| | `aap-automation` | Validate playbooks before running them through AAP job templates | | `aap-eda` | Lint rulebook playbook actions before EDA activation | | `github-ops` | CI/CD lint checks on PR playbook changes | | `gait-session-tracking` | Audit trail for lint results and quality gate decisions | ## Important Rules - **Lint before deploy** — always validate playbooks before AAP job execution - **Profile selection** — use `production` profile for production deployments, `basic` for development - **No credentials in playbooks** — lint catches hardcoded secrets; use AAP credential management instead
More Deployment & CI/CD skills
azure-enterprise-infra-planner
microsoft/azure-skills
Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.
azure-kubernetes-app-deploy
microsoft/azure-skills
Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with verification. WHEN: deploy app to AKS, deploy to existing AKS cluster, containerize app for Kubernetes, generate K8s manifests for Azure, set up CI/CD for AKS, my AKS deployment is failing safeguard checks, I have a Django/Express/Spring Boot app to run on AKS. DO NOT USE FOR: creating or provisioning an AKS cluster (use azure-kubernetes), assessing migration to AKS Automatic (use azure-kubernetes-automatic-readiness), or deploying to non-AKS targets like Web Apps, Container Apps, or Functions.
finetuning
microsoft/azure-skills
Fine-tune models on Microsoft Foundry using SFT (supervised), DPO (preference), or RFT (reinforcement with graders). Covers dataset preparation, training job submission, deployment, and evaluation. USE FOR: fine-tune, SFT, DPO, RFT, training data, grader, distillation, fine-tuned model, training job, large file upload, calibrate grader, deploy fine-tuned model, evaluate fine-tuned model. DO NOT USE FOR: general model deployment without fine-tuning (use deploy-model), agent creation (use agents), prompt optimization without training (use prompt-optimizer).
