Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jsgerman-oss/blackrim-nimbus-skills --skill azure-storage-and-databasesgit clone --depth 1 https://github.com/jsgerman-oss/blackrim-nimbus-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jsgerman-oss/blackrim-nimbus-skills/azure-storage-and-databases)<a href="https://agentmods.dev/skills/jsgerman-oss/blackrim-nimbus-skills/azure-storage-and-databases"><img src="https://agentmods.dev/badge/skills/jsgerman-oss/blackrim-nimbus-skills/azure-storage-and-databases/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jsgerman-oss/blackrim-nimbus-skills/azure-storage-and-databases"><img src="https://agentmods.dev/badge/skills/jsgerman-oss/blackrim-nimbus-skills/azure-storage-and-databases.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00072 | $0.02906 |
| Opus 5 | $0.00036 | $0.01453 |
| Sonnet 5 | $0.00014 | $0.00581 |
| Haiku 4.5 | $0.00007 | $0.00291 |
Grade A, and why
azure-storage-and-databases scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 148 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Azure Storage and Databases
When to use
- Choosing between relational, document, key-value, analytical, and object storage on Azure.
- Modeling Cosmos DB partition keys and indexing policies from access patterns.
- Sizing an Azure SQL DB or Cosmos DB tier and selecting a failover strategy.
- Hardening data-at-rest encryption, backups, and point-in-time restore.
- Auditing data egress, lifecycle policies, retention windows, and geo-replication.
Decision tree
| Need | Service |
|---|---|
| Object storage for blobs, backups, data lake, static assets | Azure Blob Storage |
| Hierarchical namespace for big-data analytics pipelines | Azure Data Lake Storage Gen2 (Blob + HNS enabled) |
| Shared POSIX / SMB filesystem across compute | Azure Files (Premium for IOPS-sensitive) |
| ACID, relational, joins, OLTP | Azure SQL Database (Hyperscale for > 4 TB or unpredictable IOPS; serverless for dev/test) |
| Single-digit-ms NoSQL with known partition key | Cosmos DB NoSQL API |
| MongoDB-compatible document store | Cosmos DB for MongoDB (vCore mode for larger workloads) |
| Cassandra-compatible wide-column | Cosmos DB for Apache Cassandra |
| Open-source PostgreSQL OLTP | Azure Database for PostgreSQL Flexible Server |
| Open-source MySQL OLTP | Azure Database for MySQL Flexible Server |
| Sub-ms cache, sessions, leaderboards, queues | Azure Cache for Redis Enterprise |
| Petabyte analytics, data warehouse | Azure Synapse Analytics (dedicated SQL pool or serverless) |
Blob Storage defaults
- Access tier: Hot for frequently accessed data, Cool for > 30-day-old infrequent data, Cold for > 90-day, Archive for > 180-day compliance retention. Use lifecycle management rules to automate transitions.
- Encryption: Microsoft-managed keys by default; migrate to customer-managed keys (CMK) stored in Key Vault for any data subject to access-audit or revocation requirements.
- Public access: disable
allowBlobPublicAccessat the storage account level. Serve static content via Azure Front Door or CDN with an origin pointing to the private endpoint — not a public blob container. - Versioning: enable for any bucket holding state, source artifacts, configuration, or backups.
- Soft delete: blob-level soft delete (7-day minimum) plus container-level soft delete for accidental deletion recovery.
- Shared key: set
allowSharedKeyAccess: false; access via Managed Identity + Azure RBAC (Storage Blob Data Contributor / Reader roles scoped to the container, not the account). - ADLS Gen2: enable hierarchical namespace (
isHnsEnabled: true) at creation — it cannot be enabled post-creation. Use ACLs at the directory level for fine-grained data lake access control; RBAC at the account level for admin operations.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 148 lines · 72 tokens per session scan A 3a1a67601bbd
azure-storage-and-databases is a skill published in the GitHub repository jsgerman-oss/blackrim-nimbus-skills (8 stars, last pushed 27d ago), licensed MIT. It adds 72 tokens to every session and 2,906 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
google-cloud-storage-fuse
Mounts Cloud Storage buckets as a POSIX file system with Cloud Storage FUSE (gcsfuse). Use when interacting with gcsfuse: decide whether FUSE, native gs:// reads, or Filestore/Managed Lustre fits a workload, deploy tuned mounts on GKE, Compute Engine, or Cloud Run, enable and size file, stat, and list caches, tune…
azure-resource-manager-redis-dotnet
Azure Resource Manager SDK for Redis in .NET. Use for MANAGEMENT PLANE operations: creating/managing Azure Cache for Redis instances, firewall rules, access keys, patch schedules, linked servers (geo-replication), and private endpoints via Azure Resource Manager. NOT for data plane operations (get/set keys, pub/sub) …
aws-cloudformation-elasticache
Provides AWS CloudFormation patterns for ElastiCache Redis or Memcached infrastructure, including subnet groups, parameter groups, security controls, and cross-stack outputs. Use when designing cache tiers, high-availability replication groups, encryption settings, or reusable CloudFormation templates for application…
cis-aws-database-5.11
Ensure ElastiCache has Cluster Mode Enabled.
cis-aws-database-5.12
Ensure ElastiCache is deployed across multiple Availability Zones (AZs).
cis-aws-database-5.13
Ensure ElastiCache has automatic backups enabled.