azure-compliance

Name: azure-compliance
Author: microsoft

Official

github.com/microsoftTesting & quality1.6k569.4k installsUpdated today

Repository

About azure-compliance

azure-compliance is an agent skill for running Azure compliance scans, security audits and Key Vault expiration checks. It is aimed at teams that need to assess resource configuration and prioritise remediation of findings.

Key features

01Comprehensive azqr compliance assessment
02Key Vault key, secret and certificate expiration monitoring
03Scope selection by subscription or resource group
04Findings classified by priority level
05Error handling and remediation guidance

Use cases

01Running scheduled compliance and security audits on subscriptions or resource groups
02Checking Key Vault keys, secrets and certificates nearing expiration
03Summarising scan results and proposing fixes for each finding

MCP support

The skill uses Azure MCP tools to run azqr scans, list subscriptions and resource groups, and inspect Key Vault items.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/microsoft/azure-skills --skill azure-compliance

After installing, type/azure-compliancein Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/

auth-best-practices.md

azqr-recommendations.md

azqr-remediation-patterns.md

azure-keyvault-expiration-audit.md

azure-quick-review.md

azure-resource-graph.md

references/sdk/

azure-keyvault-certificates-rust.md

azure-keyvault-keys-rust.md

azure-keyvault-keys-ts.md

azure-keyvault-py.md

azure-keyvault-secrets-rust.md

azure-keyvault-secrets-ts.md

azure-security-keyvault-keys-dotnet.md

azure-security-keyvault-keys-java.md

azure-security-keyvault-secrets-java.md

Details

From the project README

Azure Compliance & Security Auditing

Quick Reference

Property	Details
Best for	Compliance scans, security audits, Key Vault expiration checks
Primary capabilities	Comprehensive Resources Assessment, Key Vault Expiration Monitoring
MCP tools	azqr, subscription and resource group listing, Key Vault item inspection

Prerequisites

Authentication: user is logged in to Azure via az login
Permissions to read resource configuration and Key Vault metadata

Assessments

Assessment	Reference
Comprehensive Compliance (azqr)	references/azure-quick-review.md
Key Vault Expiration	references/azure-keyvault-expiration-audit.md
Resource Graph Queries	references/azure-resource-graph.md

MCP Tools

Tool	Purpose
`mcp_azure_mcp_extension_azqr`	Run azqr compliance scans
`mcp_azure_mcp_subscription_list`	List available subscriptions
`mcp_azure_mcp_group_list`	List resource groups
`keyvault_key_list`	List all keys in vault
`keyvault_key_get`	Get key details including expiration
`keyvault_secret_list`	List all secrets in vault
`keyvault_secret_get`	Get secret details including expiration
`keyvault_certificate_list`	List all certificates in vault
`keyvault_certificate_get`	Get certificate details including expiration

Assessment Workflow

Select scope (subscription or resource group) for Comprehensive Resources Assessment.
Run azqr and capture output artifacts.
Analyze Scan Results and summarize findings and recommendations.
Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
Classify issues and propose remediation or fix steps for each finding.

Priority Classification

Priority	Guidance
Critical	Immediate remediation required for high-impact exposure
High	Resolve within days to reduce risk
Medium	Plan a resolution in the next sprint
Low	Track and fix during regular maintenance

Error Handling

Error	Message	Remediation
Authentication required	"Please login"	Run `az login` and retry
Access denied	"Forbidden"	Confirm permissions and fix role assignments
Missing resource	"Not found"	Verify subscription and resource group selection

Best Practices

Run compliance scans on a regular schedule (weekly or monthly)
Track findings over time and verify remediation effectiveness
Separate compliance reporting from remediation execution
Keep Key Vault expiration policies documented and enforced

SDK Quick References

For programmatic Key Vault access, see the condensed SDK guides:

Key Vault (Python): Secrets/Keys/Certs
Secrets: TypeScript | Rust | Java
Keys: .NET | Java | TypeScript | Rust
Certificates: Rust

Comments

Markdown supported

Details

Author: microsoft
Repository: microsoft/azure-skills
Category: Testing & quality
Installs: 569,370
GitHub stars: 1,603
First seen: Feb 8, 2026

Report

More skills

All skills

hyperframes-cli

github.com/heygen-com

1.3M

HyperFrames CLI dev loop. Use when running npx hyperframes init, add, catalog, capture, lint, validate, inspect, layout, snapshot, compare, grade-compare, preview, play, render, publish, feedback, lambda, doctor, browser, info, upgrade, skills, compositions, docs, benchmark, telemetry, transcribe, tts, or remove-background, or when troubleshooting the HyperFrames build/render environment. Entry point for AWS Lambda cloud rendering (hyperframes lambda deploy / render / progress / destroy / policies / sites).

tdd

github.com/mattpocock

1.2M

Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.

anti-ui-slop

uizze.com

932.8k

Stop coding agents from shipping generic UI. Use UIZZE's 800,000+ real web and iOS screens to build product-specific interfaces, define a design contract, cover required states, and run a hard finish gate. Use when designing, implementing, redesigning, critiquing, or pre-ship reviewing a web or iOS interface in Codex, Claude Code, Cursor, Copilot, or another coding agent. Trigger with "anti-ui-slop", "stop UI slop", "ground this UI in real screens", or "run the UI finish gate".

diagnosing-bugs

github.com/mattpocock

856.9k

Diagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something broken/throwing/failing/slow.