azure-compliance

Audit Azure subscriptions and Key Vaults for compliance and expirations.

1|Updated Apr 4, 2026
One-click install
npx skills add https://github.com/p-potvin/vaultwares-pipelines --skill azure-compliance-p-potvin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-compliance
Source: https://github.com/p-potvin/vaultwares-pipelines/tree/main/.github/agents/agents/azure-compliance
Command: npx skills add https://github.com/p-potvin/vaultwares-pipelines --skill azure-compliance-p-potvin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Detects misconfigurations, policy and compliance gaps, and imminent Key Vault expirations across Azure subscriptions and resource groups so teams can prioritize remediation and reduce security risk.

Core Features & Use Cases

  • Comprehensive Compliance Scans: Run azqr (Azure Quick Review) to evaluate resources against best-practice baselines and discover configuration issues.
  • Key Vault Expiration Monitoring: Enumerate keys, secrets, and certificates to find expired or soon-to-expire items and identify secrets without expiration dates.
  • Resource Inventory & Posture Checks: List subscriptions and resource groups to find orphaned or misconfigured resources and generate prioritized remediation guidance.

Quick Start

Run an Azure compliance scan for a selected subscription and perform a Key Vault expiration audit after authenticating with az login.

Frequently Asked Questions about azure-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Azure subscriptions for compliance and security posture?

Azure subscription compliance audits run azqr scans to evaluate resources against best-practice baselines, generating outputs that identify configuration issues and policy gaps for remediation planning.

How do I check Azure Key Vault certificate and secret expiration dates?

Azure Key Vault expiration checks enumerate keys, secrets, and certificates to find expired or soon-to-expire items, flagging secrets without expiration dates to reduce security risk.

What permissions are needed to run an Azure Key Vault security audit?

Azure Key Vault security audits require Azure CLI authentication with read permissions on resource metadata and Key Vault contents to enumerate configuration details and expiration data.

Can I find orphaned or misconfigured resources across Azure resource groups?

Resource inventory and posture checks list subscriptions and resource groups to find orphaned or misconfigured resources, generating prioritized remediation guidance for cloud security teams.

What is azqr and how does it assess Azure resource configuration?

azqr, or Azure Quick Review, is a scanning tool that evaluates Azure resources against best-practice baselines to discover misconfigurations and compliance gaps across subscriptions.

Does this compliance scan work at the subscription and resource group level?

Azure compliance scans apply to both subscription-level and resource group-level reviews, allowing cloud security teams and auditors to scope posture assessments and Key Vault checks appropriately.