feature: add azure-kusto-graph-skills plugin - #3024
Merged
JasonYeMSFT (JasonYeMSFT) merged 9 commits intoAug 10, 2026
Merged
Conversation
New plugin with 3 skills for Kusto graph analysis and IRQL security hunting: - azure-kusto-graph: KQL graph operators (make-graph, graph-match, shortest paths, components, persistent models) - azure-kusto-irql: composable IRQL pipelines (Get_*, Extract_*, Enrich_*) - azure-kusto-irql-graph: graph visualization (Lift_To_Graph, Graph_Render_View, node folding) Includes Vally eval routing tests for all 3 skills. Closes microsoft#3013, microsoft#3014, microsoft#3015
|
Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run. |
Contributor
Author
|
@microsoft-github-policy-service agree company="Microsoft" |
Contributor
There was a problem hiding this comment.
Pull request overview
Adds a new azure-kusto-graph-skills plugin under plugins/ that packages three new Copilot skills focused on (1) KQL graph operators, (2) IRQL security hunting pipelines, and (3) IRQL-based graph visualization in Kusto Explorer, along with Vally integration evals and reference documentation.
Changes:
- Introduces the
azure-kusto-graph-skillsplugin manifests (Copilot CLI/VS Code, Cursor, Claude) plus NBGV versioning. - Adds three new skills (
azure-kusto-graph,azure-kusto-irql,azure-kusto-irql-graph) with reference docs and deployment/launch procedures. - Adds Vally integration eval suites for routing coverage for all three skills.
Reviewed changes
Copilot reviewed 24 out of 24 changed files in this pull request and generated 10 comments.
Show a summary per file
| File | Description |
|---|---|
| plugins/azure-kusto-graph-skills/version.json | NBGV versioning config for the new plugin directory |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/version.json | NBGV versioning config for the IRQL skill |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/SKILL.md | Defines the IRQL pipeline composition skill behavior and examples |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/references/KUSTO_EXPLORER_LAUNCH.md | Reference procedure for consent-gated file creation + Kusto Explorer launch |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/references/EXAMPLES.md | Prompt examples for exercising the IRQL skill |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/version.json | NBGV versioning config for the IRQL graph skill |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/SKILL.md | Defines Lift_To_Graph / render / fold workflow and mapping rules |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/references/KUSTO_EXPLORER_LAUNCH.md | Reference procedure for consent-gated file creation + Kusto Explorer launch |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/references/EXAMPLES.md | Prompt examples for exercising the IRQL graph visualization skill |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/references/DEPLOY_IRQL_FUNCTIONS.md | Deployment definitions for required stored functions (Lift/Render/Fold) |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/version.json | NBGV versioning config for the KQL graph operators skill |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/SKILL.md | Defines KQL graph operator guidance (make-graph, match, paths, components, models) |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/references/SCENARIOS.md | Worked scenario examples for applying KQL graph operators |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/references/KUSTO_EXPLORER_LAUNCH.md | Reference procedure for consent-gated file creation + Kusto Explorer launch |
| plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/references/EXAMPLES.md | Prompt examples for exercising the KQL graph operators skill |
| plugins/azure-kusto-graph-skills/README.md | Plugin-level README describing included skills |
| plugins/azure-kusto-graph-skills/LICENSE | MIT license for the new plugin |
| plugins/azure-kusto-graph-skills/.plugin/plugin.json | Copilot plugin manifest for the new plugin |
| plugins/azure-kusto-graph-skills/.mcp.json | MCP server config for the plugin |
| plugins/azure-kusto-graph-skills/.cursor-plugin/plugin.json | Cursor plugin manifest |
| plugins/azure-kusto-graph-skills/.claude-plugin/plugin.json | Claude plugin manifest |
| evals/azure-kusto-graph-skills/azure-kusto-irql/eval.yaml | Vally integration eval suite for IRQL routing |
| evals/azure-kusto-graph-skills/azure-kusto-irql-graph/eval.yaml | Vally integration eval suite for IRQL graph routing |
| evals/azure-kusto-graph-skills/azure-kusto-graph/eval.yaml | Vally integration eval suite for KQL graph routing |
Suppressed comments (1)
plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/SKILL.md:425
- Markdown table separator row has an extra trailing pipe ("||"), which breaks table rendering in some markdown parsers.
|------|---------||
…ticks, table separators, routing text, hooks ref
JasonYeMSFT (JasonYeMSFT)
previously approved these changes
Aug 6, 2026
Yun Jung Choi (yunjchoi)
previously approved these changes
Aug 7, 2026
Tom Meschter (tmeschter)
previously approved these changes
Aug 7, 2026
skill-terrain
dismissed stale reviews from Tom Meschter (tmeschter), Yun Jung Choi (yunjchoi), and JasonYeMSFT (JasonYeMSFT)
via
August 7, 2026 17:48
69c8b62
JasonYeMSFT (JasonYeMSFT)
approved these changes
Aug 10, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
New plugin (
azure-kusto-graph-skills) with 3 skills for Kusto graph analysis and IRQL security hunting in Azure Data Explorer.Skills
What's included
Validation
npm run build— passes, all 3 skills versionedvally lint— 31/31 skills pass, 0 failuresCloses #3013, #3014, #3015