Audit Azure Compliance and Key Vault Expiration
Azure teams need a consistent way to identify compliance gaps and expiring Key Vault assets. This skill runs scoped assessments and produces prioritized remediation guidance.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "azure-compliance" from https://skillstore.io/skills/microsoft-azure-compliance.md and its manifest at https://skillstore.io/api/skills/microsoft-azure-compliance/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "azure-compliance". Check Key Vault payments-prod for items expiring within 30 days.
Expected outcome:
Using "azure-compliance". Assess the production resource group and prioritize its compliance findings.
Expected outcome:
The skill is documentation-driven and contains no executable scripts. All 76 alerts are benign Markdown, SDK, authentication, Azure endpoint, or scoped remediation examples. No prompt injection, credential exfiltration, covert execution, or malicious intent was found.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/microsoft-azure-compliance/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/microsoft-azure-compliance?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/microsoft-azure-compliance?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/microsoft-azure-compliance/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/microsoft-azure-compliance.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>microsoft. (2026). azure-compliance security audit report (audit version 5) [Author version 0.0.0-placeholder]. Skillstore. https://skillstore.io/skills/microsoft-azure-compliance/audits/5@techreport{microsoft-microsoft-azure-compliance-2026,
author = {microsoft},
title = {azure-compliance security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/microsoft-azure-compliance/audits/5},
note = {Author version 0.0.0-placeholder}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-compliance security audit report (audit version 5)"
version: "0.0.0-placeholder"
type: report
authors:
- name: "microsoft"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/microsoft-azure-compliance/audits/5"
identifiers:
- type: other
value: "skillstore:microsoft-azure-compliance:audit:5"
description: "Skillstore immutable audit report identifier"
Scan a selected subscription and prioritize security, reliability, policy, cost, and operational findings.
Find expired, expiring, disabled, or undated keys, secrets, and certificates before they disrupt services.
Translate azqr findings into reviewed Azure CLI or Bicep actions for an approved change window.
Audit subscription <subscription-id> with azqr. Summarize critical and high findings, affected resources, and recommended next steps.
Audit Key Vault <vault-name> for expired items, items expiring within <days> days, disabled items, and missing expiration dates.
Assess resource group <resource-group> in subscription <subscription-id>. Correlate azqr and Resource Graph findings, then rank remediation by risk and effort.
Assess management group <management-group-id>. Correlate policy, Defender, reliability, and orphaned-resource findings into a prioritized backlog without executing changes.
Author
microsoftLicense
MIT
Author version
v0.0.0-placeholder
Skillstore revision
r2
Repository
https://github.com/microsoft/github-copilot-for-azure/tree/main/plugin/skills/azure-compliance/Ref
ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006
Maintenance freshness
7/25/2026
Usage
10 downloads · 145 views
File structure
📄 azqr-remediation-patterns.md
📄 azure-keyvault-expiration-audit.md
📁 sdk/
📄 azure-keyvault-certificates-rust.md
📄 azure-keyvault-secrets-rust.md
📄 azure-keyvault-secrets-ts.md
📄 azure-security-keyvault-keys-dotnet.md
📄 azure-security-keyvault-keys-java.md
📄 azure-security-keyvault-secrets-java.md
📄 SKILL.md
Instrument Apps with Azure Application Insights
Application teams need consistent telemetry setup across languages and Azure hosting services. This skill provides targeted SDK, infrastructure, environment, and query guidance for Application Insights.
Choose Least-Privilege Azure RBAC Roles
Selecting an Azure role with excessive permissions increases security risk. This skill recommends minimal roles and prepares Azure CLI and Bicep assignments.
Visualize Azure Resource Group Architectures
Azure resource relationships can be difficult to review across complex groups. This skill inventories resources and creates structured Mermaid architecture documentation.
Analyze Azure Data Explorer with KQL
Azure Data Explorer data can be hard to inspect without the right KQL structure and schema context. This skill helps Claude, Codex, and Claude Code build focused KQL queries, explore schemas, and troubleshoot ADX results.
Assess and Improve Azure Application Reliability
Azure application reliability gaps can remain hidden until a zone or region fails. This skill assesses key controls and guides confirmed Azure CLI or IaC remediation.
Build Azure AI Solutions with Reliable SDK Guidance
Azure AI developers must choose services, authentication methods, and SDK patterns across a broad platform. This skill provides concise guidance for secure implementation and common workflows.
Audit ISO 27001 ISMS Controls
by alirezarezvani
ISMS audits require clear scope, evidence, and risk-based priorities. This skill guides ISO 27001 audit planning, control testing, and readiness work.
Automate SecOps Checks
by alirezarezvani
Security teams need consistent review workflows across projects. This skill provides SecOps CLI scaffolds and reference guides for repeatable checks.
Strengthen Security Engineering Decisions
by 89jobrien
Security work often spans architecture, identity, compliance, testing, and response planning. This skill gives Claude, Codex, and Claude Code structured security engineering guidance.
Validate Agent Skills Before Release
by JckJhns
Skill authors need evidence that a skill works and does not expose users to avoidable risk. SkillCheck reviews structure, security, evals, scripts, and outputs through tiered checks.
Manage consent records and suppressions
by aaron-he-zhu
Consent evidence and withdrawal events can become inconsistent across marketing tools. This skill records pseudonymous consent facts and applies immediate suppression through a controlled registry.
Secure Payment Systems for PCI DSS
by wshobson
Payment systems can expand PCI scope when cardholder data is handled without clear controls. This skill helps Claude, Codex, and Claude Code design safer payment flows with PCI DSS practices.