ato-source-azure

Extract NIST 800-53 evidence from Azure using read-only az commands.

Updated Apr 27, 2026

Search Tags:#azure #compliance #governance #evidence #read-only #ato #az-cli

Ready to run

npx skills add https://github.com/AI-Strategy-LLC/AgentSkills --skill ato-source-azure

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ato-source-azure
Source: https://github.com/AI-Strategy-LLC/AgentSkills/tree/main/skills/repo-scope/ato-source-azure
Command: npx skills add https://github.com/AI-Strategy-LLC/AgentSkills --skill ato-source-azure

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Collects NIST 800-53 evidence from Azure via the az CLI, enabling compliant, read-only attestations for ATO readiness. Invoked by the orchestrator when an Azure scope is configured; strictly ambient-auth and US-region-only to prevent misconfig.

Core Features & Use Cases

Read-only evidence collection: Gather metadata and non-sensitive telemetry from Azure resources without modifying state.
Scope-confined operation: Enforces US-region only and prevents direct invocation outside an approved ATO collection.
Governance-ready outputs: Produces standardized evidence data for audits and risk assessment workflows.

Quick Start

Initiate an Azure ATO collection by triggering the orchestrator in read-only mode.

Frequently Asked Questions about ato-source-azure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I collect NIST 800-53 evidence from Azure for ATO readiness?▼

To collect NIST 800-53 evidence from Azure for ATO readiness, trigger the orchestrator in read-only mode, which uses ambient authentication to extract metadata and non-sensitive telemetry without modifying resources.

Does Azure evidence collection for ATO modify my cloud resources?▼

Azure evidence collection for ATO does not modify your resources. It strictly enforces non-modifying az commands to gather metadata and telemetry, ensuring your Azure state remains completely unaltered during the audit.

Can I gather NIST 800-53 evidence from Azure regions outside the US?▼

You cannot gather NIST 800-53 evidence from Azure regions outside the US. The collection process restricts operations to US regions only to prevent misconfigurations and ensure audit readiness.

What format does read-only Azure compliance evidence export in?▼

Read-only Azure compliance evidence exports in JSON format under an established evidence schema. This standardized output structure ensures the aggregated data is ready for governance, audit, and risk assessment workflows.

Do I need to configure authentication manually for Azure ATO evidence collection?▼

You do not need to configure authentication manually for Azure ATO evidence collection. The process uses ambient authentication, relying on your existing authenticated az CLI session to access the configured Azure scope.

Why can't I trigger Azure ATO evidence collection directly outside an approved collection?▼

Azure ATO evidence collection cannot be triggered directly outside an approved collection to enforce scope-confined operation. This design prevents misconfigurations by ensuring the Skill is only invoked by the orchestrator when an Azure scope is properly configured.