About foundry-iq
Foundry IQ is a workflow skill for Agents handling Microsoft Foundry operations across knowledge bases, search, connections, and cleanup. It routes requests to specific procedures and requires reference checks and approval before changes.
Key features
- 01Routes requests to procedures
- 02Reads required references first
- 03Requires approval before writes
- 04Handles failures and unsupported requests
- 05Separates connection from KB changes
Use cases
- 01Connect an existing knowledge base
- 02Query or search content
- 03Diagnose unsupported configuration requests
- 04Plan cleanup or changes
Install
Copy the command and run it in a terminal.
npx skills add https:/ / github.com/ microsoft/ azure-skills --skill foundry-iqAfter installing, type/foundry-iqin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
agents/connect-hosted-toolbox.mdconnect-hosted.mdconnect-prompt-sdk-fallback.mdconnect.mdcreate-missing-agent.mdhelpers/_blob_observation.py_blob_source_read.py_bootstrap_io.py_cleanup_dependencies.py_cleanup_receipts.py_common.py_document_adapters.py_document_limits.py_embedding.py_file_inventory.py_file_source_config.py_indexer_observation.py_initial_prompt.py_private_json.py_progress.py_prompt_read.py_search_read.py_source_readback.pyblob_inventory.pyblob_recheck.pyblob_source.pyblob-contracts.mdblob-cu-contracts.mdbootstrap_azure.pybootstrap-contracts.mdDetails
From the project READMEFoundry IQ
Read one procedure before questions/actions; invocation is not a read.
Read the owning procedure before blocked/unsupported responses too.
Before mutation plans/approval, successfully read its required pre-action references, selected
branches only. Do not reload successful reads. On failure, try only permitted
bounded exact-path reads with any supported reader; never bypass restrictions
or search broadly. If still unavailable: blocked: reference-unavailable, name
missing references and inability to plan. Never invent requirements/plans.
Failures first.
Cleanup and receipt-backed execution go directly to their lifecycle/producer owner; do not reopen Search intake, provisioning or hardening.
Before expensive service discovery, reuse supplied resource/intent; otherwise ask one early USE EXISTING / FIND CANDIDATES / CREATE NEW choice. Only FIND enumerates; supplied identity uses exact/minimum scoped resolution. CREATE checks its proposed name, not existing-service inventories. Preserve these answers across source/KB/CU/model handoffs; selection is not write approval.
Searchable docs: KB + validated retrieval. Confirm intent once; KS-only must be explicit. Child success is not KB completion. Unclear/compound/mode/completion: read.
Route by requested operation, not existing KB source count. Connecting an existing KB with two or more sources, without changing the KB, uses Connect. Read-only operations use their owning procedure and actual helper constraints; this does not add retrieval modes or supported source kinds. Explicit unsupported provisioning or multi-source KB creation/reconfiguration uses Diagnose and stops before discovery, even when connecting an agent is also requested. This routing takes precedence over classic-search terms (e.g. hybrid search) in compound requests. Never end in a plain refusal: Diagnose gives the boundary, docs pointer and agent handoff; writes still need an approved concrete plan. Do not silently execute only the supported part of a compound request. If existing-KB connection versus KB creation/reconfiguration is unclear, read intent-routing and clarify that scope before Azure discovery. Never infer KB mutation.
| Outcome | Read |
|---|---|
| Cleanup | Plan cleanup |
| Failure/drift | Diagnose |
| Unsupported connector provisioning / multi-source KB creation or reconfiguration | Diagnose |
| Connect | Connect |
| Read KB | Query |
| Search only | Search |
| File KS only | File |
| Blob/ADLS KS only | Blob |
| Searchable/KB | KB |
Generic agents: microsoft-foundry.
Reads: no approval; approve unchanged plans before writes.
Hide hashes. No Search/Storage keys, scope widening, guessed identity/boundaries,
drift repair or joint cleanup/creation approval. Acceptance != success.