npx skills add microsoft/azure-skills --skill azure-compliance
kilo-org/kilo-marketplace
azure-compliance
>- Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Installation
$
npx skills add kilo-org/kilo-marketplace --skill azure-compliance
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
microsoft-foundry
Same topic
microsoft/azure-skills
Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and …
576.5K installs
azure-diagnostics
Same topic
microsoft/azure-skills
Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe …
568.9K installs
azure-prepare
Same topic
microsoft/azure-skills
Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Te…
568.3K installs
azure-ai
Same topic
microsoft/azure-skills
Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybr…
568.2K installs
azure-deploy
Same topic
microsoft/azure-skills
Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deploymen…
568.2K installs
azure-validate
Same topic
microsoft/azure-skills
Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure…
567.7K installsAlso in this package
Other skills from kilo-org/kilo-marketplace · top by installs.
npx skills add kilo-org/kilo-marketplace
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Also listed on
Alternate registries and mirrors of this skill.
Repository health
Stars
173
License
LICENSE
Default branch
main
Open issues
14
Status
Active
Skill metadata
Parsed from SKILL.md frontmatter.
Version1.1.1
More metadata
- author
- Microsoft
- version
- 1.1.1
- category
- development
- source
- {"repository":"https:\/\/github.com\/microsoft\/azure-skills","path":"skills\/azure-compliance","license_path":"LICENSE","commit":"2cd48ca625cddcc1d377d2861fbddd54417c70cc"}
Package contents
Files included with this skill beyond the listing page.
-
skill md
SKILL.md4,943 B -
docs
SUMMARY.md432 B
History
- First seen on skills.sh
- First recorded snapshot · 8 installs
SKILL.md
Azure Compliance & Security Auditing
Quick Reference
| Property | Details |
|---|---|
| Best for | Compliance scans, security audits, Key Vault expiration checks |
| Primary capabilities | Comprehensive Resources Assessment, Key Vault Expiration Monitoring |
| MCP tools | azqr, subscription and resource group listing, Key Vault item inspection |
When to Use This Skill
- Run azqr or Azure Quick Review for compliance assessment
- Validate Azure resource configuration against best practices
- Identify orphaned or misconfigured resources
- Audit Key Vault keys, secrets, and certificates for expiration
Skill Activation Triggers
Activate this skill when user wants to:
- Check Azure compliance or best practices
- Assess Azure resources for configuration issues
- Run azqr or Azure Quick Review
- Identify orphaned or misconfigured resources
- Review Azure security posture
- "Show me expired certificates/keys/secrets in my Key Vault"
- "Check what's expiring in the next 30 days"
- "Audit my Key Vault for compliance"
- "Find secrets without expiration dates"
- "Check certificate expiration dates"
Prerequisites
- Authentication: user is logged in to Azure via
az login - Permissions to read resource configuration and Key Vault metadata
Assessments
| Assessment | Reference |
|---|---|
| Comprehensive Compliance (azqr) | [references/azure-quick-review.md](references/azure-quick-review.md) |
| Key Vault Expiration | [references/azure-keyvault-expiration-audit.md](references/azure-keyvault-expiration-audit.md) |
| Resource Graph Queries | [references/azure-resource-graph.md](references/azure-resource-graph.md) |
MCP Tools
| Tool | Purpose |
|---|---|
mcpazuremcpextensionazqr |
Run azqr compliance scans |
mcpazuremcpsubscriptionlist |
List available subscriptions |
mcpazuremcpgrouplist |
List resource groups |
keyvaultkeylist |
List all keys in vault |
keyvaultkeyget |
Get key details including expiration |
keyvaultsecretlist |
List all secrets in vault |
keyvaultsecretget |
Get secret details including expiration |
keyvaultcertificatelist |
List all certificates in vault |
keyvaultcertificateget |
Get certificate details including expiration |
Assessment Workflow
- Select scope (subscription or resource group) for Comprehensive Resources Assessment.
- Run azqr and capture output artifacts.
- Analyze Scan Results and summarize findings and recommendations.
- Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
- Classify issues and propose remediation or fix steps for each finding.
Priority Classification
| Priority | Guidance |
|---|---|
| Critical | Immediate remediation required for high-impact exposure |
| High | Resolve within days to reduce risk |
| Medium | Plan a resolution in the next sprint |
| Low | Track and fix during regular maintenance |
Error Handling
| Error | Message | Remediation |
|---|---|---|
| Authentication required | "Please login" | Run az login and retry |
| Access denied | "Forbidden" | Confirm permissions and fix role assignments |
| Missing resource | "Not found" | Verify subscription and resource group selection |
Best Practices
- Run compliance scans on a regular schedule (weekly or monthly)
- Track findings over time and verify remediation effectiveness
- Separate compliance reporting from remediation execution
- Keep Key Vault expiration policies documented and enforced
SDK Quick References
For programmatic Key Vault access, see the condensed SDK guides:
- Key Vault (Python): [Secrets/Keys/Certs](references/sdk/azure-keyvault-py.md)
- Secrets: [TypeScript](references/sdk/azure-keyvault-secrets-ts.md) | [Rust](references/sdk/azure-keyvault-secrets-rust.md) | [Java](references/sdk/azure-security-keyvault-secrets-java.md)
- Keys: [.NET](references/sdk/azure-security-keyvault-keys-dotnet.md) | [Java](references/sdk/azure-security-keyvault-keys-java.md) | [TypeScript](references/sdk/azure-keyvault-keys-ts.md) | [Rust](references/sdk/azure-keyvault-keys-rust.md)
- Certificates: [Rust](references/sdk/azure-keyvault-certificates-rust.md)