azure-compliance

azure-compliance: What this skill does

azure-compliance is a reusable agent skill listed on skills.sh under microsoft/azure-skills. skills.sh rank #21, installs 293.2K, GitHub stars 1.1K, first seen Feb 8, 2026.

Azure compliance scanning, Key Vault expiration auditing, and resource configuration validation. Runs azqr (Azure Quick Review) for comprehensive compliance assessment against best practices across subscriptions and resource groups Monitors Key Vault keys, secrets, and certificates for expiration dates and identifies items without expiration policies Detects orphaned, misconfigured, and non-compliant resources using Resource Graph queries Classifies findings by priority (Critical, High, Medium, Low) with remediation guidance for each issue

When to use it

• Use this skill when the task matches the package name, repository context, or skills.sh topic: cloud.
• Prefer it when a repeatable workflow is better than a one-off prompt: setup, review, design, deployment, automation, research, media generation, or operational checks.
• For production work, read the linked repository and install command before allowing the agent to run scripts or modify files.

How an agent should use it

1. Confirm the user intent and whether this skill is the right fit.
2. Install or inspect the skill with the official command from skills.sh.
3. Read the local SKILL.md and only load extra files referenced by that skill.
4. Follow the skill's workflow, then verify the result with tests, screenshots, audits, or source-backed checks as appropriate.
5. Record any constraints, missing credentials, tool permissions, or security warnings before handoff.

Quality and safety checks

• Check repository ownership and source reputation: microsoft/azure-skills.
• Review security audit signals before installing; skills.sh reports: Gen Agent Trust Hub Pass Socket Pass Snyk Pass.
• Never grant broad shell, browser, cloud, or deployment permissions without user approval.
• Treat generated output as draft until validated by the skill's own acceptance criteria.
• If the skill touches cloud resources, costs, credentials, customer data, or production deploys, require a human review step.

Sources and install

• skills.sh page: https://www.skills.sh/microsoft/azure-skills/azure-compliance
• Repository: https://github.com/microsoft/azure-skills
• Install command: npx skills add https://github.com/microsoft/azure-skills --skill azure-compliance

FAQ

Is azure-compliance an agent, a prompt, or a skill?
It is a skill: a reusable package of task-specific instructions and supporting files that an agent can load when the user's request matches the workflow.

Should I install it automatically?
Only after checking the repository, install command, audit status, and whether the user wants this capability in the current agent environment.

What makes it useful for AIDreamHub users?
It helps users discover practical agent capabilities from the open skills ecosystem and compare them by task, source, install count, and operational risk.