securityby microsoft
Azure Compliance & Security Auditing
azure-compliance
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
What it changes
Passed 2 of 15 test cases with the skill, and 1 of 15 without it.
Without skill5%
With skill14%
2 fixed1 passed either way19 still failing0 broke
- Pass-rate lift
- +9 pp
- Tokens
- +22%
- Agent turns
- 0%
- Response time
- -29%
Model gemini-3.6-flashMeasured 7/23/2026v13 of 22 cases passed with skill · 15 comparable
What's inside
The instructions your model reads when the skill loads.
SKILL.md98 lines7 files
Azure Compliance & Security Auditing
Quick Reference
When to Use This Skill
- Run azqr or Azure Quick Review for compliance assessment
- Validate Azure resource configuration against best practices
- Identify orphaned or misconfigured resources
- Audit Key Vault keys, secrets, and certificates for expiration
Skill Activation Triggers
Activate this skill when user wants to:
- Check Azure compliance or best practices
- Assess Azure resources for configuration issues
- Run azqr or Azure Quick Review
- Identify orphaned or misconfigured resources
- Review Azure security posture
- "Show me expired certificates/keys/secrets in my Key Vault"
- "Check what's expiring in the next 30 days"
- "Audit my Key Vault for compliance"
- "Find secrets without expiration dates"
- "Check certificate expiration dates"
Prerequisites
- Authentication: user is logged in to Azure via
az login
- Permissions to read resource configuration and Key Vault metadata
Assessments
Track record
Benchmark
2 / 15
test cases passed, vs 1 / 15 without
Adoption
- Users
- 0
- Times used
- 0
Safety and source details
SkillSafety
✓ 3 of 3 passed✓Code scan15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v4 — 7/30/2026
View 15 scanner checks
live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing
✓IntentSafe
LLM judge · does the skill do what it claims
✓ContentClean
LLM judge · policy & harmful-content review
Source
ImportedLicense MITImported 6/14/2026Version v1Bundled 6 files