azure-sweep

Automates Azure compliance sweeps across eight layers and outputs remediation code in Bicep, Terraform, and CLI.

5|2|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/srnichols/plan-forge --skill azure-sweep
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-sweep
Source: https://github.com/srnichols/plan-forge/tree/main/presets/azure-iac/.github/skills/azure-sweep
Command: npx skills add https://github.com/srnichols/plan-forge --skill azure-sweep

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires az, resource-graph, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill solves the problem of maintaining compliance with Azure governance by running a full 8-layer sweep of the Azure environment.

Core Features & Use Cases

  • Compliance Sweep: Runs a prioritized compliance sweep across WAF, CAF, Landing Zone, Policy, Org Rules, Resource Graph, Telemetry, and Remediation layers.
  • Findings Report: Outputs a structured findings report with Bicep, Terraform, and CLI remediation code.
  • Use Case: Before a production deployment, after an environment is provisioned, or during quarterly compliance reviews, this Skill can be used to ensure governance compliance.

Quick Start

Execute the azure-sweep skill to perform a compliance sweep on the current subscription.

Frequently Asked Questions about azure-sweep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate an Azure governance compliance sweep across my environment?▼

You can automate an Azure governance compliance sweep by running a comprehensive scan across eight Azure layers, including Policy, Resource Graph, and WAF, to identify non-compliance issues and generate remediation code.

What is the best way to generate remediation code for Azure non-compliance findings?▼

The best way to generate remediation code for Azure non-compliance findings is to run a full compliance sweep that outputs a structured findings report containing Bicep, Terraform, and CLI remediation scripts.

Do I need the Azure CLI and Resource Graph extension to perform a compliance check?▼

Yes, you need the Azure CLI and the Resource Graph extension installed, along with specific instructions files, to execute the automated compliance sweep across your Azure subscriptions.

When should I run an Azure compliance sweep on my cloud environment?▼

You should run an Azure compliance sweep before a production deployment, immediately after an environment is provisioned, or during quarterly compliance reviews to ensure strict governance adherence.

What Azure layers are checked during a governance compliance sweep?▼

A governance compliance sweep checks eight prioritized Azure layers: WAF, CAF, Landing Zone, Policy, Org Rules, Resource Graph, Telemetry, and Remediation, ensuring full environment coverage.