Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →microsoftdocs/azure-security
Expert knowledge for Azure Security development including best practices, decision making, security, configuration, integrations & coding patterns, and deployment.
Passed 8 of 21 test cases with the skill, and 13 of 21 without it.
and 13 more in the full report
13 fixed4 passed either way7 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
This benchmark measured an earlier version of the skill.
One of 13 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are conducting threat modeling for an Azure web application using Microsoft Threat Modeling Tool and identified logging gap vulnerabilities. Which official documentation URL covers threat modeling mitigations for auditing and logging?
| Checked | Without skill | With skill |
|---|---|---|
| Includes the documentation URL https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-auditing-and-logging | Missed | Passed |
| Recommends avoiding logging sensitive user data such as plain text credentials | Passed | Passed |
The instructions your model reads when the skill loads.
This skill provides expert guidance for Azure Security. Covers best practices, decision making, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,
L35-L120), useread_filewith the specified lines. For categories with file links (e.g.,[security.md](security.md)), useread_fileon the linked reference file
IMPORTANT for Agent: If
metadata.generated_atis more than 3 months old, suggest the user pull the latest version from the repository. Ifmcp_microsoftdocstools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.| Category | Lines | Description |
|---|---|---|
| Best Practices | L34-L58 | End-to-end Azure security guidance: hardening IaaS/PaaS, identity and access, network and operational security, backups and ransomware resilience, secrets management, and service-specific checklists. |
| Decision Making | L59-L64 | Guidance on choosing Azure security options: comparing feature availability in US Gov clouds and selecting the appropriate key management service (e.g., Key Vault, managed keys). |
| Security | L65-L97 | Security best practices for Azure: threat modeling mitigations, platform and network hardening, access control, encryption/keys, infrastructure integrity, and secure AKS/VM/SQL operations. |
| Configuration | L98-L108 | Configuring Azure security features: antimalware, container scanning (Dependabot/Copacetic), firewall rules, CMK encryption, logging/auditing, TLS changes, ransomware protections, and Customer Lockbox alerts. |
| Integrations & Coding Patterns | L109-L114 | Guides for generating signed SBOMs for container images and scripting Microsoft Antimalware configuration in Azure using PowerShell. |
| Deployment | L115-L120 | Guides for signing and verifying container images with Notation in Azure Pipelines/GitHub Actions, plus comparing security feature availability in Azure vs Azure Government. |
test cases passed, vs 13 / 21 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.