azure-compliance
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [Azure Resource Access]: The skill requires access to read Azure resource configurations and Key Vault metadata. This data access is fundamental to its purpose of identifying compliance gaps and monitoring credential expirations. The implementation uses standard administrative patterns and follows the principle of least privilege by recommending Reader roles for initial assessments.
- [Authentication Best Practices]: The skill includes extensive documentation on secure authentication, specifically advising developers to transition from development-oriented credentials like
DefaultAzureCredentialto production-readyManagedIdentityCredential. This educational content helps prevent accidental credential exposure in production environments. - [Trusted External Resources]: All external documentation and software references within the skill point to official Microsoft domains (e.g., learn.microsoft.com, aka.ms) or the official Azure GitHub organization. These are recognized as reliable and safe sources for technical specifications and administrative tooling.
- [Auditing Command Patterns]: The skill utilizes Azure Resource Graph and Azure Quick Review (azqr) for scanning. The KQL (Kusto Query Language) patterns and CLI commands provided are standard for Azure governance and are used within the context of reporting and diagnostic analysis.
Audit Metadata