Stats
Actions
Tags
Help us improve
Share bugs, ideas, or general feedback.
From azure
Runs Azure compliance audits with azqr and Key Vault expiration checks for secrets, keys, certificates. Detects misconfigurations, orphaned resources, and security issues.
npx claudepluginhub attentiondotnet/azure-skillsHow this skill is triggered — by the user, by Claude, or both
Slash command
/azure:azure-complianceThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
| Property | Details |
references/auth-best-practices.mdreferences/azqr-recommendations.mdreferences/azqr-remediation-patterns.mdreferences/azure-keyvault-expiration-audit.mdreferences/azure-quick-review.mdreferences/azure-resource-graph.mdreferences/sdk/azure-keyvault-certificates-rust.mdreferences/sdk/azure-keyvault-keys-rust.mdreferences/sdk/azure-keyvault-keys-ts.mdreferences/sdk/azure-keyvault-py.mdreferences/sdk/azure-keyvault-secrets-rust.mdreferences/sdk/azure-keyvault-secrets-ts.mdreferences/sdk/azure-security-keyvault-keys-dotnet.mdreferences/sdk/azure-security-keyvault-keys-java.mdreferences/sdk/azure-security-keyvault-secrets-java.mdRuns Azure compliance scans with azqr and audits Key Vault keys, secrets, and certificates for expiration. Use before resource reviews or security posture checks.
Reviews Azure security posture, baseline hardening, managed identity adoption, Key Vault posture, private access decisions, Policy guardrails, and logging/audit gap analysis. Useful when hardening workloads without defaulting to broad access or public exposure.
Detects misconfigured Azure Storage accounts including public blob containers, missing encryption, permissive SAS tokens, disabled logging, and network violations using Azure CLI, PowerShell, and Defender for Storage. For security audits and compliance.
Share bugs, ideas, or general feedback.
| Property | Details |
|---|---|
| Best for | Compliance scans, security audits, Key Vault expiration checks |
| Primary capabilities | Comprehensive Resources Assessment, Key Vault Expiration Monitoring |
| MCP tools | azqr, subscription and resource group listing, Key Vault item inspection |
Activate this skill when user wants to:
az login| Assessment | Reference |
|---|---|
| Comprehensive Compliance (azqr) | references/azure-quick-review.md |
| Key Vault Expiration | references/azure-keyvault-expiration-audit.md |
| Resource Graph Queries | references/azure-resource-graph.md |
| Tool | Purpose |
|---|---|
mcp_azure_mcp_extension_azqr | Run azqr compliance scans |
mcp_azure_mcp_subscription_list | List available subscriptions |
mcp_azure_mcp_group_list | List resource groups |
keyvault_key_list | List all keys in vault |
keyvault_key_get | Get key details including expiration |
keyvault_secret_list | List all secrets in vault |
keyvault_secret_get | Get secret details including expiration |
keyvault_certificate_list | List all certificates in vault |
keyvault_certificate_get | Get certificate details including expiration |
| Priority | Guidance |
|---|---|
| Critical | Immediate remediation required for high-impact exposure |
| High | Resolve within days to reduce risk |
| Medium | Plan a resolution in the next sprint |
| Low | Track and fix during regular maintenance |
| Error | Message | Remediation |
|---|---|---|
| Authentication required | "Please login" | Run az login and retry |
| Access denied | "Forbidden" | Confirm permissions and fix role assignments |
| Missing resource | "Not found" | Verify subscription and resource group selection |
For programmatic Key Vault access, see the condensed SDK guides: