Back to catalog / Security
Azure compliance audit: define read scope and separate remediation
Run azqr and expiry metadata checks, classify evidence, and recommend separate fixes.
Skills
Confirm the user is logged in with `az login` and set subscription/resource-group scope. Use the source-listed Azure MCP azqr, subscription/group, and Key Vault metadata tools, or review the Resource Graph query first. Read expiry metadata only, never secret values. Save scan artifacts, distinguish evidence from inference, classify findings, and recommend fixes without changing roles, policies, keys, or resources. Report access gaps; remediation requires separate approval.
Permissions
Prerequisites
- Audit Azure compliance and Key Vault expiry metadata for a subscription or resource group.
Permissions
- Reads resource configuration and key metadata; do not retrieve secret values or remediate automatically.
Limitations
Requires Azure login/read access; remediation is separate and needs approval.
Pinned upstream source
- Repository
- microsoft/skills
- File path
- .github/plugins/azure-skills/skills/azure-compliance/SKILL.md
- Pinned commit
fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb- Source checked
- 2026-10-14 · Reviewed against the pinned upstream source
Repository metrics
These values describe the upstream repository, not popularity or likes for an individual skill or playbook.
- Stars
- Not collected
- Forks
- Not collected
- Observed at
- Not collected
No metrics snapshot is available yet.
License: MIT
Compatible tools
Azure MCP azqr/subscription/group/Key Vault tools · Azure Resource Graph
Main topic
Make Agent behavior safer and easier to verify