Agent skill · microsoft
azure-kusto-irql-graph
Apply IRQL graph functions to KQL or IRQL query results for Kusto Explorer visualization. Generates Lift_To_Graph mappings and composes Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Accepts a supplied query or limited basic natural-language source request; it is not a general natural-language-to-KQL/IRQL skill. WHEN: Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing query results, icon-decorated graph, fold graph nodes. Use azure-kusto-graph for native make-graph analysis, graph-match, shortest paths, components, or persistent graphs.
What it needs
About 8k tokens when loaded.
What this skill does
IRQL Graph Functions -- Query Results to Visualization Apply the IRQL graph function family to tabular results. Given a KQL or IRQL query and the user's graph description, generate a LiftToGraph mapping and compose only the stored graph functions needed to visualize, fold, extract, or enrich the graph in Kusto Explorer. The source query does not need to use IRQL. Scope and Routing Request Use --- --- Turn supplied KQL/IRQL rows into an icon-decorated visual graph This skill: LiftToGraph + GraphRenderView Fold nodes or apply ExtractNode, EnrichNode, or EnrichGraph This skill Use make-graph, graph-match, shortest paths, connected components, graph models, or snapshots azure-kusto-graph Author a non-trivial KQL/IRQL investigation from natural language A Kusto or IRQL query-generation skill, then this skill If a request mixes visualization and native graph analysis, use this skill for the lift/render portion and azure-kusto-graph for operator semantics. Do not replace graph-lift functions with a hand-built edges-first graph unless the user asks for native graph operators. Input Contract Preferred input: a working KQL/IRQL query that produces tabular results, plus a natural-language description of the desired nodes, edges, labels, icons, extracts, enrichments, or folds. This skill is not a natural-language-to-KQL or NL-to-IRQL converter. It transforms existing query results into graph visualizations. For general NL-to-KQL or NL-to-IRQL conversion, use a dedicated query-generation skill (available separately). Preserve the supplied query's retrieval, joins, filters, and aggregations. Add only projections or synthetic IDs required by the graph mapping. A basic natural-language source request is supported only when it maps directly to one known table or IRQL Get selector with obvious columns and simple filters. State the assumed source, and do not invent joins, schema, or investigation logic. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills microsoft/azure-kusto-irql-graph