azqr, subscription and resource group listing, Key Vault item inspection
When to Use This Skill
Run azqr or Azure Quick Review for compliance assessment
Validate Azure resource configuration against best practices
Identify orphaned or misconfigured resources
Audit Key Vault keys, secrets, and certificates for expiration
Skill Activation Triggers
Activate this skill when user wants to:
Check Azure compliance or best practices
Assess Azure resources for configuration issues
Run azqr or Azure Quick Review
Identify orphaned or misconfigured resources
Review Azure security posture
"Show me expired certificates/keys/secrets in my Key Vault"
"Check what's expiring in the next 30 days"
"Audit my Key Vault for compliance"
"Find secrets without expiration dates"
"Check certificate expiration dates"
Prerequisites
Authentication: user is logged in to Azure via az login
Permissions to read resource configuration and Key Vault metadata
Assessments
Assessment
Reference
Comprehensive Compliance (azqr)
references/azure-quick-review.md
Key Vault Expiration
references/azure-keyvault-expiration-audit.md
Resource Graph Queries
references/azure-resource-graph.md
MCP Tools
Tool
Purpose
mcp_azure_mcp_extension_azqr
Run azqr compliance scans
mcp_azure_mcp_subscription_list
List available subscriptions
mcp_azure_mcp_group_list
List resource groups
keyvault_key_list
List all keys in vault
keyvault_key_get
Get key details including expiration
keyvault_secret_list
List all secrets in vault
keyvault_secret_get
Get secret details including expiration
keyvault_certificate_list
List all certificates in vault
keyvault_certificate_get
Get certificate details including expiration
Assessment Workflow
Select scope (subscription or resource group) for Comprehensive Resources Assessment.
Run azqr and capture output artifacts.
Analyze Scan Results and summarize findings and recommendations.
Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
Classify issues and propose remediation or fix steps for each finding.
Priority Classification
Priority
Guidance
Critical
Immediate remediation required for high-impact exposure
High
Resolve within days to reduce risk
Medium
Plan a resolution in the next sprint
Low
Track and fix during regular maintenance
Error Handling
Error
Message
Remediation
Authentication required
"Please login"
Run az login and retry
Access denied
"Forbidden"
Confirm permissions and fix role assignments
Missing resource
"Not found"
Verify subscription and resource group selection
Best Practices
Run compliance scans on a regular schedule (weekly or monthly)
Track findings over time and verify remediation effectiveness
Separate compliance reporting from remediation execution
Keep Key Vault expiration policies documented and enforced
SDK Quick References
For programmatic Key Vault access, see the condensed SDK guides:
Key Vault (Python): Secrets/Keys/Certs
Secrets: TypeScript | Rust | Java
Keys: .NET | Java | TypeScript | Rust
Certificates: Rust
1---2name: azure-compliance3description: "|"4---56# Azure Compliance & Security Auditing78## Quick Reference910| Property | Details |11|---|---|12| Best for | Compliance scans, security audits, Key Vault expiration checks |13| Primary capabilities | Comprehensive Resources Assessment, Key Vault Expiration Monitoring |14| MCP tools | azqr, subscription and resource group listing, Key Vault item inspection |1516## When to Use This Skill1718- Run azqr or Azure Quick Review for compliance assessment19- Validate Azure resource configuration against best practices20- Identify orphaned or misconfigured resources21- Audit Key Vault keys, secrets, and certificates for expiration2223## Skill Activation Triggers2425Activate this skill when user wants to:26- Check Azure compliance or best practices27- Assess Azure resources for configuration issues28- Run azqr or Azure Quick Review29- Identify orphaned or misconfigured resources30- Review Azure security posture31- "Show me expired certificates/keys/secrets in my Key Vault"32- "Check what's expiring in the next 30 days"33- "Audit my Key Vault for compliance"34- "Find secrets without expiration dates"35- "Check certificate expiration dates"3637## Prerequisites3839- Authentication: user is logged in to Azure via `az login`40- Permissions to read resource configuration and Key Vault metadata4142## Assessments4344| Assessment | Reference |45|------------|-----------|46| Comprehensive Compliance (azqr) | [references/azure-quick-review.md](references/azure-quick-review.md) |47| Key Vault Expiration | [references/azure-keyvault-expiration-audit.md](references/azure-keyvault-expiration-audit.md) |48| Resource Graph Queries | [references/azure-resource-graph.md](references/azure-resource-graph.md) |4950## MCP Tools5152| Tool | Purpose |53|------|---------|54| `mcp_azure_mcp_extension_azqr` | Run azqr compliance scans |55| `mcp_azure_mcp_subscription_list` | List available subscriptions |56| `mcp_azure_mcp_group_list` | List resource groups |57| `keyvault_key_list` | List all keys in vault |58| `keyvault_key_get` | Get key details including expiration |59| `keyvault_secret_list` | List all secrets in vault |60| `keyvault_secret_get` | Get secret details including expiration |61| `keyvault_certificate_list` | List all certificates in vault |62| `keyvault_certificate_get` | Get certificate details including expiration |6364## Assessment Workflow65661. Select scope (subscription or resource group) for Comprehensive Resources Assessment.672. Run azqr and capture output artifacts.683. Analyze Scan Results and summarize findings and recommendations.694. Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.705. Classify issues and propose remediation or fix steps for each finding.7172### Priority Classification7374| Priority | Guidance |75|---|---|76| Critical | Immediate remediation required for high-impact exposure |77| High | Resolve within days to reduce risk |78| Medium | Plan a resolution in the next sprint |79| Low | Track and fix during regular maintenance |8081## Error Handling8283| Error | Message | Remediation |84|---|---|---|85| Authentication required | "Please login" | Run `az login` and retry |86| Access denied | "Forbidden" | Confirm permissions and fix role assignments |87| Missing resource | "Not found" | Verify subscription and resource group selection |8889## Best Practices9091- Run compliance scans on a regular schedule (weekly or monthly)92- Track findings over time and verify remediation effectiveness93- Separate compliance reporting from remediation execution94- Keep Key Vault expiration policies documented and enforced9596## SDK Quick References9798For programmatic Key Vault access, see the condensed SDK guides:99100- **Key Vault (Python)**: [Secrets/Keys/Certs](references/sdk/azure-keyvault-py.md)101- **Secrets**: [TypeScript](references/sdk/azure-keyvault-secrets-ts.md) | [Rust](references/sdk/azure-keyvault-secrets-rust.md) | [Java](references/sdk/azure-security-keyvault-secrets-java.md)102- **Keys**: [.NET](references/sdk/azure-security-keyvault-keys-dotnet.md) | [Java](references/sdk/azure-security-keyvault-keys-java.md) | [TypeScript](references/sdk/azure-keyvault-keys-ts.md) | [Rust](references/sdk/azure-keyvault-keys-rust.md)103- **Certificates**: [Rust](references/sdk/azure-keyvault-certificates-rust.md)
Run npx skillmds@latest add tryboy869/azure-compliance in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
| It is listed under DevOps & Infra on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
Tryboy869 (@tryboy869) published this skill. Their other Agent Skills are listed on their SkillMD profile.
Tryboy869