nsg-audit Skill
Use when an operator or a scheduled task requests a periodic Network Security Group (NSG) and connectivity-path audit of the Zava Learning resource group — enumerate every NSG and its rules, trace the full path (NSGs, UDRs / route tables, Private Endpoints, DNS, and any firewall), flag overly-permissive, shadowed, unus Published by microsoft in sre-agent.
What is nsg-audit Skill?
Use when an operator or a scheduled task requests a periodic Network Security Group (NSG) and connectivity-path audit of the Zava Learning resource group — enumerate every NSG and its rules, trace the full path (NSGs, UDRs / route tables, Private Endpoints, DNS, and any firewall), flag overly-permissive, shadowed, unus Published by microsoft in sre-agent. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Security review use cases
Technical details
- Install or run with Copy skill directory
When to use nsg-audit Skill
- Use it for security review.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/sre-agent
- Skill file: labs/zava-learning/sre-config/agent-config/skills/nsg-audit/SKILL.md
What it does
Use when an operator or a scheduled task requests a periodic Network Security Group (NSG) and connectivity-path audit of the Zava Learning resource group — enumerate every NSG and its rules, trace the full path (NSGs, UDRs / route tables, Private Endpoints, DNS, and any firewall), flag overly-permissive, shadowed, unus
Skill instructions
Zava Learning — Network Security Group (NSG) & Connectivity-Path Audit Resource Group: @@RG@@. Read-only audit — never create, modify, or delete an NSG, rule, route, or firewall. This is a weekly posture review of the lab's network exposure and the integrity of its connectivity paths, not an incident response. 1. Enumerate the network surface - List every NSG: az network nsg list -g @@RG@@. - For each NSG, list its security rules (custom + default): az network nsg rule list -g @@RG@@ --nsg-name <nsg --include-default. - Map each NSG to what it protects (az network nsg show -g @@RG@@ -n <nsg --query "{subnets:subnets[].id, nics:networkInterfaces[].id}"). An NSG attached to no subnet and no NIC is orphaned — itself a finding. 2. Evaluate every inbound (and risky outbound) rule Flag, with an impact-based severity (see the zava-audit-report severity model): - SEV1 — any inbound Allow from / Internet / 0.0.0.0/0 to a management port (22 SSH, 3389 RDP); a blanket Allow : (any source, any por
Explore related resources
Frequently asked questions
What is nsg-audit?
nsg-audit is a open-source AI agent skill with Copy skill directory. Use when an operator or a scheduled task requests a periodic Network Security Group (NSG) and connectivity-path audit of the Zava Learning resource group — enumerate every NSG and its rules, trace the full.
Who is nsg-audit best for?
nsg-audit is best for reusing agent instructions, scripts, and references, security review workflows.
How do I install nsg-audit?
Install or run nsg-audit using Copy skill directory. Check nsg-audit for the latest setup command.
Is nsg-audit actively maintained?
nsg-audit may need a closer maintenance check before production use.
Auto-fetched from GitHub.
