SkillsAdd

microsoft/azure-skills · Official

azure-compliance

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

All-time #56 Trending #177 First seen Feb 8, 2026
8-week activity · all time api

Installation

$ npx skills add microsoft/azure-skills --skill azure-compliance
View on skills.sh ↗ GitHub repository ↗

Summary

  • Azure compliance scanning, Key Vault expiration auditing, and resource configuration validation.
  • Runs azqr (Azure Quick Review) for comprehensive compliance assessment against best practices across subscriptions and resource groups Monitors Key Vault keys, secrets, and certificates for expiration dates and identifies items without expiration policies Detects orphaned, misconfigured, and non-compliant resources using Resource Graph queries Classifies findings by priority (Critical, High, Medium, Low) with remediation guidance for each issue

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

playwright-cli Same topic
microsoft/playwright-cli

Automate browser interactions, test web pages and work with Playwright tests.

146.5K installs
create-auth Same topic
better-auth/skills 29.9K installs
microsoft-docs Same topic
github/awesome-copilot

Query official Microsoft documentation to find concepts, tutorials, and code examples across Az…

14.5K installs
microsoft-code-reference Same topic
github/awesome-copilot

Look up Microsoft API references, find working code samples, and verify SDK code is correct. Us…

14K installs
azure-devops-cli Same topic
github/awesome-copilot

Manage Azure DevOps resources via CLI including projects, repos, pipelines, builds, pull reques…

13.5K installs
azure-deployment-preflight Same topic
github/awesome-copilot

Performs comprehensive preflight validation of Bicep deployments to Azure, including template s…

9.6K installs

Security audits

Partner security reviews for this skill.

agent-trust-hub SAFE

Analyzed Apr 22, 2026

This skill provides tools and guidance for Azure security and compliance auditing. It follows established security patterns by emphasizing managed identities and focusing on resource metadata for audits. No security concerns were identified.

snyk LOW

Analyzed Apr 22, 2026

No issues detected.

socket Score 0.9000 · 0 alerts

Analyzed Apr 22, 2026

  • license 1
  • maintenance 1
  • quality 0.9
  • supply chain 1
  • vulnerability 1

0 alerts

Also in this package

Other skills from microsoft/azure-skills · top by installs.

npx skills add microsoft/azure-skills
microsoft-foundry 576.5K azure-diagnostics 568.9K azure-prepare 568.3K azure-ai 568.2K azure-deploy 568.2K azure-validate 567.7K azure-storage 567.1K entra-app-registration 566.9K appinsights-instrumentation 566.6K azure-resource-lookup 566.5K

Browse all from microsoft/azure-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.5K
License MIT
Default branch main
Open issues 9
Last push Sep 10, 2026
Status Active

Skill metadata

Parsed from SKILL.md frontmatter.

Version1.2.1
LicenseMIT
More metadata
author
Microsoft
version
1.2.1

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 4,739 B
  • docs SUMMARY.md 432 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 567,700 installs

SKILL.md

Azure Compliance & Security Auditing

Quick Reference

Property Details
Best for Compliance scans, security audits, Key Vault expiration checks
Primary capabilities Comprehensive Resources Assessment, Key Vault Expiration Monitoring
MCP tools azqr, subscription and resource group listing, Key Vault item inspection

When to Use This Skill

  • Run azqr or Azure Quick Review for compliance assessment
  • Validate Azure resource configuration against best practices
  • Identify orphaned or misconfigured resources
  • Audit Key Vault keys, secrets, and certificates for expiration

Skill Activation Triggers

Activate this skill when user wants to:

  • Check Azure compliance or best practices
  • Assess Azure resources for configuration issues
  • Run azqr or Azure Quick Review
  • Identify orphaned or misconfigured resources
  • Review Azure security posture
  • "Show me expired certificates/keys/secrets in my Key Vault"
  • "Check what's expiring in the next 30 days"
  • "Audit my Key Vault for compliance"
  • "Find secrets without expiration dates"
  • "Check certificate expiration dates"

Prerequisites

  • Authentication: user is logged in to Azure via az login
  • Permissions to read resource configuration and Key Vault metadata

Assessments

Assessment Reference
Comprehensive Compliance (azqr) [references/azure-quick-review.md](references/azure-quick-review.md)
Key Vault Expiration [references/azure-keyvault-expiration-audit.md](references/azure-keyvault-expiration-audit.md)
Resource Graph Queries [references/azure-resource-graph.md](references/azure-resource-graph.md)

MCP Tools

Tool Purpose
mcpazuremcpextensionazqr Run azqr compliance scans
mcpazuremcpsubscriptionlist List available subscriptions
mcpazuremcpgrouplist List resource groups
keyvaultkeylist List all keys in vault
keyvaultkeyget Get key details including expiration
keyvaultsecretlist List all secrets in vault
keyvaultsecretget Get secret details including expiration
keyvaultcertificatelist List all certificates in vault
keyvaultcertificateget Get certificate details including expiration

Assessment Workflow

  1. Select scope (subscription or resource group) for Comprehensive Resources Assessment.
  2. Run azqr and capture output artifacts.
  3. Analyze Scan Results and summarize findings and recommendations.
  4. Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
  5. Classify issues and propose remediation or fix steps for each finding.

Priority Classification

Priority Guidance
Critical Immediate remediation required for high-impact exposure
High Resolve within days to reduce risk
Medium Plan a resolution in the next sprint
Low Track and fix during regular maintenance

Error Handling

Error Message Remediation
Authentication required "Please login" Run az login and retry
Access denied "Forbidden" Confirm permissions and fix role assignments
Missing resource "Not found" Verify subscription and resource group selection

Best Practices

  • Run compliance scans on a regular schedule (weekly or monthly)
  • Track findings over time and verify remediation effectiveness
  • Separate compliance reporting from remediation execution
  • Keep Key Vault expiration policies documented and enforced

SDK Quick References

For programmatic Key Vault access, see the condensed SDK guides:

  • Key Vault (Python): [Secrets/Keys/Certs](references/sdk/azure-keyvault-py.md)
  • Secrets: [TypeScript](references/sdk/azure-keyvault-secrets-ts.md) | [Rust](references/sdk/azure-keyvault-secrets-rust.md) | [Java](references/sdk/azure-security-keyvault-secrets-java.md)
  • Keys: [.NET](references/sdk/azure-security-keyvault-keys-dotnet.md) | [Java](references/sdk/azure-security-keyvault-keys-java.md) | [TypeScript](references/sdk/azure-keyvault-keys-ts.md) | [Rust](references/sdk/azure-keyvault-keys-rust.md)
  • Certificates: [Rust](references/sdk/azure-keyvault-certificates-rust.md)