microsoft avatar

Azure Compliance

The azure-compliance skill enables developers and Azure administrators to run comprehensive compliance and security audits against Azure resources using azqr, while also monitoring Key Vault expiration dates for keys, secrets, and certificates. It addresses the need to validate Azure resource configurations against best practices, identify misconfigurations and orphaned resources, and ensure credentials are not expired or approaching expiration. The skill activates when users request compliance scans, security posture reviews, or Key Vault audits, requiring Azure CLI authentication and read permissions on resources and Key Vault metadata.

skills.sh installs
103K
GitHub stars
217
last updated
Jun 11, 2026

Install

$ npx -y skills add microsoft/github-copilot-for-azure --skill azure-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

Azure Compliance & Security Auditing

Quick Reference

PropertyDetails
Best forCompliance scans, security audits, Key Vault expiration checks
Primary capabilitiesComprehensive Resources Assessment, Key Vault Expiration Monitoring
MCP toolsazqr, subscription and resource group listing, Key Vault item inspection

Prerequisites

  • Authentication: user is logged in to Azure via az login
  • Permissions to read resource configuration and Key Vault metadata

Assessments

AssessmentReference
Comprehensive Compliance (azqr)references/azure-quick-review.md
Key Vault Expirationreferences/azure-keyvault-expiration-audit.md
Resource Graph Queriesreferences/azure-resource-graph.md

MCP Tools

Sponsors

Details

Repository
github.com/microsoft/github-copilot-for-azure
Categories
Security, Git & Pull Requests, Code Review & Quality, AI & Agent Building, Cloud & Infrastructure, CLI & Terminal

More from microsoft/github-copilot-for-azure

All 40

Recommended

More Security
1googleworkspace avatargws-sharedgoogleworkspace/cligws CLI: Shared patterns for authentication, global flags, and output formatting.68Kskills.sh installs
2useosint avatarinvestigate-without-getting-madeuseosint/skillsInvestigator OPSEC — threat-model who might notice you, control your attribution surface across IP, ASN, browser and TLS fingerprint, timing and logged-in accou58.2Kskills.sh installs
3binance avatarbinance-agentic-walletbinance/binance-skills-hubUse when the user mentions connect/disconnect wallet, sign in, sign out, web3 wallet, wallet address, check balance, how much crypto do I have, send BNB/USDT/cr51.1Kskills.sh installs
4shadcn avatarimproveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
5firebase avatarfirebase-firestore-enterprise-native-modefirebase/agent-skillsComprehensive guide for Firestore enterprise native including provisioning, data model, security rules, and SDK usage. Use this skill when the user needs help s36Kskills.sh installs
6mcp-use avatarmcp-apps-buildermcp-use/mcp-useBuild, modify, debug, migrate, or review TypeScript MCP servers and interactive MCP Apps using mcp-use v2. Use for tools, resources, prompts, Views, React host 33.1Kskills.sh installs