[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6EDF8NH73SZY650WR4HSSA3":3,"skill-same:01M6EDF8NH73SZY650WR4HSSA3":48},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":21,"linkOnly":22,"markdownContent":23,"markdownBody":23,"frontMatter":24,"refName":25,"commitSha":26,"skillDirectory":27,"forksCount":28,"repositoryHtmlUrl":29,"repositoryHomepageUrl":30,"ownerHtmlUrl":31,"ownerBlogUrl":6,"ownerDescription":32,"updatedAt":33,"install":34,"resources":47},"01M6EDF8NH73SZY650WR4HSSA3","azure-security",null,"ComeOnOliver\u002Fskillshub","ComeOnOliver","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F43215937?v=4","01M6E5JNFECJAAVFE0W7SMWWD2","Haoran Shu","01M6E5JNNDQS7AJZDYFQ8TPZCK",67,"MIT","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-security\u002FSKILL.md",[],[18,19,20],"security","azure","azure security","2026-11-10 10:12:30",false,"# Azure Security Skill\n\nThis skill provides expert guidance for Azure Security. Covers troubleshooting, best practices, decision making, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https:\u002F\u002Fgithub.com\u002FMicrosoftDocs\u002Fmcp\u002Fblob\u002Fmain\u002FREADME.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text\u002Fmarkdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L35-L39 | Diagnosing and resolving common Azure Customer Lockbox issues, including access request problems, approval\u002Fdenial errors, and configuration or permission-related failures. |\n| Best Practices | L40-L58 | Security hardening checklists and patterns for Azure IaaS\u002FPaaS: identity, network, data encryption, secrets, DNS, and app\u002Fdatabase\u002Fservice configurations to reduce attack surface. |\n| Decision Making | L59-L64 | Guidance on which Azure services support customer-managed encryption keys and how to choose the right key management approach (Key Vault, managed HSM, platform keys) for your workloads. |\n| Security | L65-L95 | Securing Azure workloads: threat modeling mitigations, AKS image validation, ransomware defense, incident response, data protection, access control, and Azure security best practices. |\n| Configuration | L96-L103 | Configuring Azure security features like antimalware, firewalls, container vulnerability tools, security logging\u002Fauditing, and upcoming managed TLS\u002FDCV changes |\n| Integrations & Coding Patterns | L104-L108 | Guidance on generating signed SBOMs for container images, attaching them in CI\u002FCD, and integrating software supply chain security into deployment workflows. |\n| Deployment | L109-L115 | Guides for signing and verifying container images with Notation in Azure Pipelines\u002FGitHub Actions, plus comparing security feature availability in Azure vs Azure Government. |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Resolve common issues with Azure Customer Lockbox | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fcustomer-lockbox-faq |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Harden Azure Marketplace images before publishing | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fazure-marketplace-images |\n| Apply Azure data security and encryption best practices | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fdata-encryption-best-practices |\n| Use Azure SQL database security checklist | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fdatabase-security-checklist |\n| Apply security best practices to Azure IaaS workloads | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fiaas |\n| Apply Microsoft Entra identity security best practices | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fidentity-management-best-practices |\n| Apply Azure network security best practices | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fnetwork-best-practices |\n| Apply operational security best practices for Azure assets | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Foperational-best-practices |\n| Secure Azure App Service web and mobile applications | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fpaas-applications-using-app-services |\n| Secure PaaS databases with Azure SQL and Synapse | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fpaas-applications-using-sql |\n| Secure PaaS applications using Azure Storage features | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fpaas-applications-using-storage |\n| Design and operate secure PaaS deployments on Azure | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fpaas-deployments |\n| Protect secrets across Azure services and pipelines | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fsecrets-best-practices |\n| Apply security best practices to Azure Service Fabric | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fservice-fabric-best-practices |\n| Implement five-step checklist to secure Entra ID | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fsteps-secure-identity |\n| Prevent Azure subdomain takeover with DNS and App Service | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fsubdomain-takeover |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Identify Azure services supporting customer managed keys | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fencryption-customer-managed-keys-support |\n| Choose the right Azure key management solution | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fkey-management-choose |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Enforce AKS image signature validation with Ratify and Azure Policy | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fcontainer-secure-supply-chain\u002Farticles\u002Fvalidating-image-signatures-using-ratify-aks |\n| Implement auditing and logging mitigations with Threat Modeling Tool | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-auditing-and-logging |\n| Apply authentication mitigations using Microsoft Threat Modeling Tool | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-authentication |\n| Mitigate authorization threats in Threat Modeling Tool | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-authorization |\n| Secure communications based on Threat Modeling Tool findings | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-communication-security |\n| Harden configuration management using Threat Modeling Tool mitigations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-configuration-management |\n| Implement cryptography mitigations from Threat Modeling Tool | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-cryptography |\n| Secure exception management using Threat Modeling Tool guidance | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-exception-management |\n| Apply secure input validation mitigations from Threat Modeling Tool | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-input-validation |\n| Protect sensitive data using Threat Modeling Tool mitigations | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-sensitive-data |\n| Implement secure session management from Threat Modeling Tool | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fdevelop\u002Fthreat-modeling-tool-session-management |\n| Apply Azure-specific security best practices for AI workloads | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fai-security-best-practices |\n| Configure Microsoft Antimalware in Azure with PowerShell | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fantimalware-code-samples |\n| Use Azure Certificate Authority roots and requirements | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fazure-certificate-authority-details |\n| Design Azure backup and restore plan against ransomware | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fbackup-plan-to-protect-against-ransomware |\n| Implement Azure resource security best practices | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fbest-practices-and-patterns |\n| Configure alternate email notifications for Customer Lockbox | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fcustomer-lockbox-alternative-email |\n| Control Microsoft engineer data access with Customer Lockbox | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fcustomer-lockbox-overview |\n| Implement Azure-specific incident response practices | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fincident-response-overview |\n| Review Azure SQL Database built-in security features | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Finfrastructure-sql |\n| Apply Azure operational security checklist actions | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Foperational-checklist |\n| Understand security access methods for Azure production network | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fproduction-network |\n| Understand Azure controls for protection of customer data | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fprotection-customer-data |\n| Detect and respond to ransomware using Azure security tools | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fransomware-detect-respond |\n| Use Azure-native features to protect against ransomware | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fransomware-features-resources |\n| Prepare Azure environments to withstand ransomware attacks | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fransomware-prepare |\n| Configure Azure Firewall Premium to mitigate ransomware | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fransomware-protection-with-azure-firewall |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Configure Dependabot and Copacetic for container security | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fcontainer-secure-supply-chain\u002Farticles\u002Fcontainer-secure-supply-chain-implementation\u002Fcssc-depenadabot-quickstart |\n| Configure firewalls using Azure domain patterns | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fazure-domains |\n| Configure and analyze Azure security logging and auditing | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Flog-audit |\n| Adapt to upcoming Azure managed TLS and DCV changes | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Fmanaged-tls-changes |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Create and attach signed SBOMs to container images | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fcontainer-secure-supply-chain\u002Farticles\u002Fattach-sbom |\n\n### Deployment\n| Topic | URL |\n|-------|-----|\n| Sign and verify container images in Azure Pipelines with Notation | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fcontainer-secure-supply-chain\u002Farticles\u002Fnotation-ado-task-sign |\n| Sign container images with Notation in GitHub Actions | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fcontainer-secure-supply-chain\u002Farticles\u002Fnotation-sign-gha |\n| Verify container image signatures with Notation in GitHub Actions | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Fcontainer-secure-supply-chain\u002Farticles\u002Fverify-gha |\n| Check Azure vs Azure Government security feature availability | https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fsecurity\u002Ffundamentals\u002Ffeature-availability |\n",{},"main","def8531e65114c0fca8fb8551c1871ee0eed705c","skills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-security",24,"https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub","https:\u002F\u002Fskillshub.wtf","https:\u002F\u002Fgithub.com\u002FComeOnOliver","AI & Blockchain Engineer\r\n","2026-06-24 22:07:19",{"source":7,"skillName":5,"commands":35,"prompt":45,"zipAvailable":46},[36,39,42],{"tool":37,"command":38},"npx","npx skills add ComeOnOliver\u002Fskillshub --skill azure-security",{"tool":40,"command":41},"bunx","bunx skills add ComeOnOliver\u002Fskillshub --skill azure-security",{"tool":43,"command":44},"pnpm","pnpm dlx skills add ComeOnOliver\u002Fskillshub --skill azure-security","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002FMicrosoftDocs\u002FAgent-Skills\u002Fazure-security\u002FSKILL.md",true,[],[49,63,73,82,88,95],{"skillNo":50,"name":51,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":52,"categories":53,"keywords":59,"publishedAt":21},"01M6FKJN13GMG4KY57J3QD8GY5","model-hierarchy-skill","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzscole\u002Fmodel-hierarchy-skill\u002Fmodel-hierarchy-skill\u002FSKILL.md",[54],{"categoryNo":55,"categoryName":56,"taxonomyType":57,"taxonomyTypeDesc":58},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[60,61,62],"model","model hierarchy","model hierarchy skill",{"skillNo":64,"name":65,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":66,"categories":67,"keywords":69,"publishedAt":21},"01M6FKJJJ6GCAMR4PPPRD12M5X","zoom-mcp","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-mcp\u002FSKILL.md",[68],{"categoryNo":55,"categoryName":56,"taxonomyType":57,"taxonomyTypeDesc":58},[70,71,72],"MCP","zoom","zoom mcp",{"skillNo":74,"name":75,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":76,"categories":77,"keywords":78,"publishedAt":21},"01M6FKJE3KYT3KPEZMEEHYKA6K","zoom-apps-sdk","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fzoom-apps-sdk\u002FSKILL.md",[],[79,80,81,71],"sdk","zoom apps sdk","apps",{"skillNo":83,"name":84,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":85,"categories":86,"keywords":87,"publishedAt":21},"01M6FKJ9EDH9Q5VWDF8HAJRSP0","windows","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwindows\u002FSKILL.md",[],[84],{"skillNo":89,"name":90,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":91,"categories":92,"keywords":94,"publishedAt":21},"01M6FKJ666BEEFC3AE9GJ72Q93","whiteboard","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwhiteboard\u002FSKILL.md",[93],{"categoryNo":55,"categoryName":56,"taxonomyType":57,"taxonomyTypeDesc":58},[90],{"skillNo":96,"name":97,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":98,"categories":99,"keywords":100,"publishedAt":21},"01M6FKJ21WFCDGTJQ2Q91T9DVW","websockets","https:\u002F\u002Fgithub.com\u002FComeOnOliver\u002Fskillshub\u002Fblob\u002Fmain\u002Fskills\u002Fzoom\u002Fskills\u002Fwebsockets\u002FSKILL.md",[],[97]]