Skill · em Proteger

azure-compliance

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices,…

Procedência

Antes de instalar

16 arquivos · 46,7 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 117b038) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/skills/azure-compliance/.

d=".claude/skills/azure-compliance"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/azure-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/auth-best-practices.md" "$u/references/auth-best-practices.md" \
  -o "$d/references/azqr-recommendations.md" "$u/references/azqr-recommendations.md" \
  -o "$d/references/azqr-remediation-patterns.md" "$u/references/azqr-remediation-patterns.md" \
  -o "$d/references/azure-keyvault-expiration-audit.md" "$u/references/azure-keyvault-expiration-audit.md" \
  -o "$d/references/azure-quick-review.md" "$u/references/azure-quick-review.md" \
  -o "$d/references/azure-resource-graph.md" "$u/references/azure-resource-graph.md" \
  -o "$d/references/sdk/azure-keyvault-certificates-rust.md" "$u/references/sdk/azure-keyvault-certificates-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-rust.md" "$u/references/sdk/azure-keyvault-keys-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-ts.md" "$u/references/sdk/azure-keyvault-keys-ts.md" \
  -o "$d/references/sdk/azure-keyvault-py.md" "$u/references/sdk/azure-keyvault-py.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-rust.md" "$u/references/sdk/azure-keyvault-secrets-rust.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-ts.md" "$u/references/sdk/azure-keyvault-secrets-ts.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-dotnet.md" "$u/references/sdk/azure-security-keyvault-keys-dotnet.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-java.md" "$u/references/sdk/azure-security-keyvault-keys-java.md" \
  -o "$d/references/sdk/azure-security-keyvault-secrets-java.md" "$u/references/sdk/azure-security-keyvault-secrets-java.md"

Global: instala em ~/.claude/skills/azure-compliance/.

d="$HOME/.claude/skills/azure-compliance"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/azure-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/auth-best-practices.md" "$u/references/auth-best-practices.md" \
  -o "$d/references/azqr-recommendations.md" "$u/references/azqr-recommendations.md" \
  -o "$d/references/azqr-remediation-patterns.md" "$u/references/azqr-remediation-patterns.md" \
  -o "$d/references/azure-keyvault-expiration-audit.md" "$u/references/azure-keyvault-expiration-audit.md" \
  -o "$d/references/azure-quick-review.md" "$u/references/azure-quick-review.md" \
  -o "$d/references/azure-resource-graph.md" "$u/references/azure-resource-graph.md" \
  -o "$d/references/sdk/azure-keyvault-certificates-rust.md" "$u/references/sdk/azure-keyvault-certificates-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-rust.md" "$u/references/sdk/azure-keyvault-keys-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-ts.md" "$u/references/sdk/azure-keyvault-keys-ts.md" \
  -o "$d/references/sdk/azure-keyvault-py.md" "$u/references/sdk/azure-keyvault-py.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-rust.md" "$u/references/sdk/azure-keyvault-secrets-rust.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-ts.md" "$u/references/sdk/azure-keyvault-secrets-ts.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-dotnet.md" "$u/references/sdk/azure-security-keyvault-keys-dotnet.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-java.md" "$u/references/sdk/azure-security-keyvault-keys-java.md" \
  -o "$d/references/sdk/azure-security-keyvault-secrets-java.md" "$u/references/sdk/azure-security-keyvault-secrets-java.md"

Codex

Neste projeto: instala em .agents/skills/azure-compliance/.

d=".agents/skills/azure-compliance"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/azure-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/auth-best-practices.md" "$u/references/auth-best-practices.md" \
  -o "$d/references/azqr-recommendations.md" "$u/references/azqr-recommendations.md" \
  -o "$d/references/azqr-remediation-patterns.md" "$u/references/azqr-remediation-patterns.md" \
  -o "$d/references/azure-keyvault-expiration-audit.md" "$u/references/azure-keyvault-expiration-audit.md" \
  -o "$d/references/azure-quick-review.md" "$u/references/azure-quick-review.md" \
  -o "$d/references/azure-resource-graph.md" "$u/references/azure-resource-graph.md" \
  -o "$d/references/sdk/azure-keyvault-certificates-rust.md" "$u/references/sdk/azure-keyvault-certificates-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-rust.md" "$u/references/sdk/azure-keyvault-keys-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-ts.md" "$u/references/sdk/azure-keyvault-keys-ts.md" \
  -o "$d/references/sdk/azure-keyvault-py.md" "$u/references/sdk/azure-keyvault-py.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-rust.md" "$u/references/sdk/azure-keyvault-secrets-rust.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-ts.md" "$u/references/sdk/azure-keyvault-secrets-ts.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-dotnet.md" "$u/references/sdk/azure-security-keyvault-keys-dotnet.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-java.md" "$u/references/sdk/azure-security-keyvault-keys-java.md" \
  -o "$d/references/sdk/azure-security-keyvault-secrets-java.md" "$u/references/sdk/azure-security-keyvault-secrets-java.md"

Global: instala em ~/.agents/skills/azure-compliance/.

d="$HOME/.agents/skills/azure-compliance"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/azure-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/auth-best-practices.md" "$u/references/auth-best-practices.md" \
  -o "$d/references/azqr-recommendations.md" "$u/references/azqr-recommendations.md" \
  -o "$d/references/azqr-remediation-patterns.md" "$u/references/azqr-remediation-patterns.md" \
  -o "$d/references/azure-keyvault-expiration-audit.md" "$u/references/azure-keyvault-expiration-audit.md" \
  -o "$d/references/azure-quick-review.md" "$u/references/azure-quick-review.md" \
  -o "$d/references/azure-resource-graph.md" "$u/references/azure-resource-graph.md" \
  -o "$d/references/sdk/azure-keyvault-certificates-rust.md" "$u/references/sdk/azure-keyvault-certificates-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-rust.md" "$u/references/sdk/azure-keyvault-keys-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-ts.md" "$u/references/sdk/azure-keyvault-keys-ts.md" \
  -o "$d/references/sdk/azure-keyvault-py.md" "$u/references/sdk/azure-keyvault-py.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-rust.md" "$u/references/sdk/azure-keyvault-secrets-rust.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-ts.md" "$u/references/sdk/azure-keyvault-secrets-ts.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-dotnet.md" "$u/references/sdk/azure-security-keyvault-keys-dotnet.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-java.md" "$u/references/sdk/azure-security-keyvault-keys-java.md" \
  -o "$d/references/sdk/azure-security-keyvault-secrets-java.md" "$u/references/sdk/azure-security-keyvault-secrets-java.md"

Antigravity

Neste projeto: instala em .agents/skills/azure-compliance/.

d=".agents/skills/azure-compliance"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/azure-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/auth-best-practices.md" "$u/references/auth-best-practices.md" \
  -o "$d/references/azqr-recommendations.md" "$u/references/azqr-recommendations.md" \
  -o "$d/references/azqr-remediation-patterns.md" "$u/references/azqr-remediation-patterns.md" \
  -o "$d/references/azure-keyvault-expiration-audit.md" "$u/references/azure-keyvault-expiration-audit.md" \
  -o "$d/references/azure-quick-review.md" "$u/references/azure-quick-review.md" \
  -o "$d/references/azure-resource-graph.md" "$u/references/azure-resource-graph.md" \
  -o "$d/references/sdk/azure-keyvault-certificates-rust.md" "$u/references/sdk/azure-keyvault-certificates-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-rust.md" "$u/references/sdk/azure-keyvault-keys-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-ts.md" "$u/references/sdk/azure-keyvault-keys-ts.md" \
  -o "$d/references/sdk/azure-keyvault-py.md" "$u/references/sdk/azure-keyvault-py.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-rust.md" "$u/references/sdk/azure-keyvault-secrets-rust.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-ts.md" "$u/references/sdk/azure-keyvault-secrets-ts.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-dotnet.md" "$u/references/sdk/azure-security-keyvault-keys-dotnet.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-java.md" "$u/references/sdk/azure-security-keyvault-keys-java.md" \
  -o "$d/references/sdk/azure-security-keyvault-secrets-java.md" "$u/references/sdk/azure-security-keyvault-secrets-java.md"

Global: instala em ~/.gemini/antigravity-cli/skills/azure-compliance/.

d="$HOME/.gemini/antigravity-cli/skills/azure-compliance"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/azure-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/auth-best-practices.md" "$u/references/auth-best-practices.md" \
  -o "$d/references/azqr-recommendations.md" "$u/references/azqr-recommendations.md" \
  -o "$d/references/azqr-remediation-patterns.md" "$u/references/azqr-remediation-patterns.md" \
  -o "$d/references/azure-keyvault-expiration-audit.md" "$u/references/azure-keyvault-expiration-audit.md" \
  -o "$d/references/azure-quick-review.md" "$u/references/azure-quick-review.md" \
  -o "$d/references/azure-resource-graph.md" "$u/references/azure-resource-graph.md" \
  -o "$d/references/sdk/azure-keyvault-certificates-rust.md" "$u/references/sdk/azure-keyvault-certificates-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-rust.md" "$u/references/sdk/azure-keyvault-keys-rust.md" \
  -o "$d/references/sdk/azure-keyvault-keys-ts.md" "$u/references/sdk/azure-keyvault-keys-ts.md" \
  -o "$d/references/sdk/azure-keyvault-py.md" "$u/references/sdk/azure-keyvault-py.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-rust.md" "$u/references/sdk/azure-keyvault-secrets-rust.md" \
  -o "$d/references/sdk/azure-keyvault-secrets-ts.md" "$u/references/sdk/azure-keyvault-secrets-ts.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-dotnet.md" "$u/references/sdk/azure-security-keyvault-keys-dotnet.md" \
  -o "$d/references/sdk/azure-security-keyvault-keys-java.md" "$u/references/sdk/azure-security-keyvault-keys-java.md" \
  -o "$d/references/sdk/azure-security-keyvault-secrets-java.md" "$u/references/sdk/azure-security-keyvault-secrets-java.md"

Peça ao Rook

Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/microsoft.azure-skills.azure-compliance

Prévia do SKILL.md

---
name: azure-compliance
description: "Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vaul…
license: MIT
metadata:
  author: Microsoft
  version: "1.2.2"
---

# Azure Compliance & Security Auditing

## Quick Reference

| Property | Details |
|---|---|
| Best for | Compliance scans, security audits, Key Vault expiration checks |
| Primary capabilities | Comprehensive Resources Assessment, Key Vault Expiration Monitoring |
| MCP tools | azqr, subscription and resource group listing, Key Vault item inspection |

## Prerequisites

- Authentication: user is logged in to Azure via `az login`
- Permissions to read resource configuration and Key Vault metadata

## Assessments

| Assessment | Reference |
|------------|-----------|
| Comprehensive Compliance (azqr) | [references/azure-quick-review.md](references/azure-quick-review.md) |
| Key Vault Expiration | [references/azure-keyvault-expiration-audit.md](references/azure-keyvault-expiration-audit.md) |
| Resource Graph Queries | [references/azure-resource-graph.md](references/azure-resource-graph.md) |

## MCP Tools

| Tool | Purpose |
|------|---------|
| `mcp_azure_mcp_extension_azqr` | Run azqr compliance scans |
| `mcp_azure_mcp_subscription_list` | List available subscriptions |
| `mcp_azure_mcp_group_list` | List resource groups |
| `keyvault_key_list` | List all keys in vault |
…

Ver todo o marketplace