Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →grcengclub/azure-inspector-expert
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
Passed 20 of 21 test cases with the skill, and 5 of 21 without it.
and 18 more in the full report
16 fixed5 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 15 test cases the skill fixed. Same model, same prompt, with and without the skill.
Our Key Vault instances currently rely on legacy vault access policies rather than Azure RBAC roles. What control ID and severity apply to this preference finding?
| Checked | Without skill | With skill |
|---|---|---|
| Uses SCF control ID IAC-07.2 for Azure RBAC authorization preference | Missed | Passed |
| Assigns medium severity to vault access policy usage | Passed | Passed |
The instructions your model reads when the skill loads.
Use this skill when interpreting azure-inspector findings or explaining Azure control gaps.
Entra ID
| SCF | Check | Typical outcome |
|---|---|---|
| IAC-01.1 | MFA posture needs Graph/authentication-method verification | inconclusive when Azure CLI cannot prove coverage |
| IAC-04 | Enabled Conditional Access policies exist | high fail if none found |
Storage accounts
| SCF | Check | Severity |
|---|---|---|
| CRY-05 | Blob/file encryption enabled | high if disabled |
| DCH-01.2 | Blob public access disabled | critical if allowed |
| CRY-06 | Minimum TLS version is TLS 1.2 or later | medium |
Key Vault
| SCF | Check | Severity |
|---|---|---|
| BCD-11 | Soft delete and purge protection | high/medium |
| IAC-07.2 | Azure RBAC authorization preferred over access policies | medium |
Monitor + Defender for Cloud
| SCF | Check | Severity |
|---|---|---|
| MON-02 | Subscription Activity Log diagnostic export configured | high |
| MON-01.2 | Defender for Cloud Standard plan enabled | high |
inconclusive as an evidence gap, not a pass. Entra MFA coverage often needs Microsoft Graph permissions beyond basic Azure Reader.not_applicable document as a scope signal, not a security defect. Example: no Key Vaults found.test cases passed, vs 5 / 21 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.