From magic-powers
Use when managing Azure DevOps pipeline infrastructure — self-hosted agent pools, service connections, variable groups, secure files, environments, approvals, and pipeline resource governance.
npx claudepluginhub kienbui1995/magic-powers --plugin magic-powersThis skill uses the workspace's default tool permissions.
- Setting up self-hosted agent pools and registering agents
Generates design tokens/docs from CSS/Tailwind/styled-components codebases, audits visual consistency across 10 dimensions, detects AI slop in UI.
Records polished WebM UI demo videos of web apps using Playwright with cursor overlay, natural pacing, and three-phase scripting. Activates for demo, walkthrough, screen recording, or tutorial requests.
Delivers idiomatic Kotlin patterns for null safety, immutability, sealed classes, coroutines, Flows, extensions, DSL builders, and Gradle DSL. Use when writing, reviewing, refactoring, or designing Kotlin code.
# List agent pools
az pipelines agent pool list --org https://dev.azure.com/MyOrg --output table
# List agents in pool
az pipelines agent list \
--pool-id 5 \
--org https://dev.azure.com/MyOrg \
--output table
Self-hosted agent registration:
# Download agent, then configure
./config.sh \
--url https://dev.azure.com/MyOrg \
--auth pat \
--token $PAT \
--pool "SelfHosted-Linux" \
--agent "agent-01" \
--unattended
# Install as service
sudo ./svc.sh install
sudo ./svc.sh start
Agent pool types:
# Create Azure Resource Manager service connection
az devops service-endpoint azurerm create \
--azure-rm-service-principal-id $SP_ID \
--azure-rm-subscription-id $SUB_ID \
--azure-rm-subscription-name "Production" \
--azure-rm-tenant-id $TENANT_ID \
--name "Azure-Production" \
--project MyProject
# List service connections
az devops service-endpoint list --project MyProject --output table
Service connection types and use cases:
| Type | Use case |
|---|---|
| Azure Resource Manager | Deploy to Azure (App Service, AKS, etc.) |
| Docker Registry | Push/pull container images |
| GitHub | Checkout private repos, trigger from GitHub |
| Kubernetes | Deploy to AKS/any cluster |
| Generic | Custom REST APIs, webhooks |
Security: Grant "Project Collection Build Service" only — not broad contributor access.
# Create variable group
az pipelines variable-group create \
--name "Production-Config" \
--variables ENV=prod DB_HOST=prod.db.company.com \
--project MyProject
# Add secret variable
az pipelines variable-group variable create \
--group-id 5 \
--name "DB_PASSWORD" \
--value "secret123" \
--secret true \
--project MyProject
Link to Azure Key Vault:
# Create environment
az pipelines environment create \
--name "production" \
--project MyProject
Add approval check via UI: Environment → Approvals and checks → Add → Approvals
Environment resources: VMs and Kubernetes clusters can be registered as resources for deployment target tracking.
ado-security-policies — control who can create/modify service connections and pipeline resourcesado-api-cli — automate service connection creation and variable group managementazure-devops-pipelines — YAML authoring that consumes the infrastructure set up here