| name | ado-aw |
|---|---|
| description | Azure DevOps Agentic Workflows (ado-aw) - Create, update, and debug AI-powered Azure DevOps agentic workflows |
This skill helps you create and manage Azure DevOps agentic workflows using ado-aw.
ado-aw compiles human-friendly markdown files with YAML front matter into secure, multi-stage Azure DevOps pipelines that run AI agents in network-isolated sandboxes.
Before creating or compiling workflows, ensure the ado-aw compiler is available. Use the first-time installer for your platform:
# Linux
curl -fsSL https://github.com/githubnext/ado-aw/releases/latest/download/install-linux.sh | sh
# macOS (Apple Silicon)
curl -fsSL https://github.com/githubnext/ado-aw/releases/latest/download/install-macos.sh | sh
# Windows (PowerShell)
$script = Join-Path $env:TEMP "install-ado-aw.ps1"
Invoke-WebRequest "https://github.com/githubnext/ado-aw/releases/latest/download/install-windows.ps1" -UseBasicParsing -OutFile $script
Get-FileHash $script -Algorithm SHA256
Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass
& $scriptThese scripts validate release checksums, install ado-aw, and update PATH when needed.
If Windows reports a UseShellExecute environment-variable error, run these commands from your current PowerShell session instead of wrapping them in powershell -Command.
Verify: ado-aw --version
This is a dispatcher skill that routes your request to the appropriate specialized prompt:
- Creating new agentic workflows → Routes to the create prompt
- Updating existing workflows → Routes to the update prompt
- Debugging failing workflows → Routes to the debug prompt
Load when: User wants to create a new agentic workflow from scratch
Prompt file: https://raw.githubusercontent.com/githubnext/ado-aw/v{{ compiler_version }}/prompts/create-ado-agentic-workflow.md
Use cases:
- "Create an agentic workflow that reviews PRs weekly"
- "I need a workflow that triages work items daily"
- "Design a scheduled dependency updater"
Load when: User wants to modify an existing agent workflow file
Prompt file: https://raw.githubusercontent.com/githubnext/ado-aw/v{{ compiler_version }}/prompts/update-ado-agentic-workflow.md
Use cases:
- "Add the Azure DevOps MCP to my workflow"
- "Change the schedule from daily to weekly"
- "Add work item creation as a safe output"
Load when: User needs to troubleshoot a failing agentic workflow
Prompt file: https://raw.githubusercontent.com/githubnext/ado-aw/v{{ compiler_version }}/prompts/debug-ado-agentic-workflow.md
Use cases:
- "Why is my agentic workflow failing?"
- "The agent can't reach the MCP server"
- "Safe outputs aren't being processed"
When a user interacts with you:
- Identify the task type from the user's request
- Load the appropriate prompt from the URLs listed above
- Follow the loaded prompt's instructions exactly
- If uncertain, ask clarifying questions to determine the right prompt
# Compile an agent file to pipeline YAML
ado-aw compile <agent-file.md>
# Recompile all detected pipelines
ado-aw compile
# Verify pipeline matches source
ado-aw check <pipeline.lock.yml>- Natural language workflows: Write in markdown with YAML frontmatter
- 3-stage security: Agent → Threat Analysis → Safe Output Execution
- Network isolation: AWF (Agentic Workflow Firewall) with domain whitelisting
- MCP Gateway: Tool routing for Azure DevOps, custom MCPs
- Safe outputs: Controlled write operations (PRs, work items, wiki pages)
- Agent memory: Persistent storage across pipeline runs
- Agent files must be compiled with
ado-aw compileafter YAML frontmatter changes - Markdown body (agent instructions) changes do NOT require recompilation
- The agent never has direct write access — all mutations go through safe outputs
- Full reference: https://raw.githubusercontent.com/githubnext/ado-aw/v{{ compiler_version }}/AGENTS.md