SkillsAdd

microsoft/azure-skills · Official

azure-compliance

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

All-time #84 Trending #246 First seen Feb 8, 2026
8-week activity · all time api

Installation

$ npx skills add microsoft/azure-skills --skill azure-compliance
View on skills.sh ↗ GitHub repository ↗
Feature your product here Skill page unit · reach builders installing agent skills View pricing →

Summary

  • Azure compliance scanning, Key Vault expiration auditing, and resource configuration validation.
  • Runs azqr (Azure Quick Review) for comprehensive compliance assessment against best practices across subscriptions and resource groups Monitors Key Vault keys, secrets, and certificates for expiration dates and identifies items without expiration policies Detects orphaned, misconfigured, and non-compliant resources using Resource Graph queries Classifies findings by priority (Critical, High, Medium, Low) with remediation guidance for each issue

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

compliance-check Similar name
anthropics/knowledge-work-plugins

Run a compliance check on a proposed action, product feature, or business initiative, surfacing…

7 installs
compliance-tracking Similar name
anthropics/knowledge-work-plugins

Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SO…

2.9K installs
agent-owasp-compliance Similar name
github/awesome-copilot

Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. U…

9 installs
accessibility-compliance Similar name
wshobson/agents

Implement WCAG 2.2 compliant interfaces with mobile accessibility, inclusive design patterns, a…

35 installs
pci-compliance Similar name
wshobson/agents

Implement PCI DSS compliance requirements for secure handling of payment card data and payment …

28 installs
customs-trade-compliance Similar name
affaan-m/ecc

Codified expertise for customs documentation, tariff classification, duty optimization, restric…

63 installs

Security audits

Partner security reviews for this skill.

agent-trust-hub Reviewed

Analyzed Oct 3, 2026

snyk Reviewed

Analyzed Oct 3, 2026

socket Score 0.9000 · 0 alerts

Analyzed Oct 3, 2026

  • license 1
  • maintenance 1
  • quality 0.9
  • supply chain 1
  • vulnerability 1

0 alerts

Also in this package

Other skills from microsoft/azure-skills · top by installs.

npx skills add microsoft/azure-skills
microsoft-foundry 1.7K azure-diagnostics 1.6K azure-prepare 1.5K azure-ai 1.5K azure-deploy 1.5K azure-validate 1.5K azure-storage 1.5K entra-app-registration 1.5K appinsights-instrumentation 1.5K azure-resource-lookup 1.5K

Browse all from microsoft/azure-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.5K
License MIT
Default branch main
Open issues 9
Last push Sep 10, 2026
Status Active

Skill metadata

Parsed from SKILL.md frontmatter.

Version1.2.1
LicenseMIT
More metadata
author
Microsoft
version
1.2.1

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 4,739 B
  • docs SUMMARY.md 432 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 567,700 installs

SKILL.md

Azure Compliance & Security Auditing

Quick Reference

Property Details
Best for Compliance scans, security audits, Key Vault expiration checks
Primary capabilities Comprehensive Resources Assessment, Key Vault Expiration Monitoring
MCP tools azqr, subscription and resource group listing, Key Vault item inspection

When to Use This Skill

  • Run azqr or Azure Quick Review for compliance assessment
  • Validate Azure resource configuration against best practices
  • Identify orphaned or misconfigured resources
  • Audit Key Vault keys, secrets, and certificates for expiration

Skill Activation Triggers

Activate this skill when user wants to:

  • Check Azure compliance or best practices
  • Assess Azure resources for configuration issues
  • Run azqr or Azure Quick Review
  • Identify orphaned or misconfigured resources
  • Review Azure security posture
  • "Show me expired certificates/keys/secrets in my Key Vault"
  • "Check what's expiring in the next 30 days"
  • "Audit my Key Vault for compliance"
  • "Find secrets without expiration dates"
  • "Check certificate expiration dates"

Prerequisites

  • Authentication: user is logged in to Azure via az login
  • Permissions to read resource configuration and Key Vault metadata

Assessments

Assessment Reference
Comprehensive Compliance (azqr) [references/azure-quick-review.md](references/azure-quick-review.md)
Key Vault Expiration [references/azure-keyvault-expiration-audit.md](references/azure-keyvault-expiration-audit.md)
Resource Graph Queries [references/azure-resource-graph.md](references/azure-resource-graph.md)

MCP Tools

Tool Purpose
mcpazuremcpextensionazqr Run azqr compliance scans
mcpazuremcpsubscriptionlist List available subscriptions
mcpazuremcpgrouplist List resource groups
keyvaultkeylist List all keys in vault
keyvaultkeyget Get key details including expiration
keyvaultsecretlist List all secrets in vault
keyvaultsecretget Get secret details including expiration
keyvaultcertificatelist List all certificates in vault
keyvaultcertificateget Get certificate details including expiration

Assessment Workflow

  1. Select scope (subscription or resource group) for Comprehensive Resources Assessment.
  2. Run azqr and capture output artifacts.
  3. Analyze Scan Results and summarize findings and recommendations.
  4. Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
  5. Classify issues and propose remediation or fix steps for each finding.

Priority Classification

Priority Guidance
Critical Immediate remediation required for high-impact exposure
High Resolve within days to reduce risk
Medium Plan a resolution in the next sprint
Low Track and fix during regular maintenance

Error Handling

Error Message Remediation
Authentication required "Please login" Run az login and retry
Access denied "Forbidden" Confirm permissions and fix role assignments
Missing resource "Not found" Verify subscription and resource group selection

Best Practices

  • Run compliance scans on a regular schedule (weekly or monthly)
  • Track findings over time and verify remediation effectiveness
  • Separate compliance reporting from remediation execution
  • Keep Key Vault expiration policies documented and enforced

SDK Quick References

For programmatic Key Vault access, see the condensed SDK guides:

  • Key Vault (Python): [Secrets/Keys/Certs](references/sdk/azure-keyvault-py.md)
  • Secrets: [TypeScript](references/sdk/azure-keyvault-secrets-ts.md) | [Rust](references/sdk/azure-keyvault-secrets-rust.md) | [Java](references/sdk/azure-security-keyvault-secrets-java.md)
  • Keys: [.NET](references/sdk/azure-security-keyvault-keys-dotnet.md) | [Java](references/sdk/azure-security-keyvault-keys-java.md) | [TypeScript](references/sdk/azure-keyvault-keys-ts.md) | [Rust](references/sdk/azure-keyvault-keys-rust.md)
  • Certificates: [Rust](references/sdk/azure-keyvault-certificates-rust.md)