azure-keyvault-py
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [Secure Authentication Practices]: The skill explicitly instructs developers to avoid hardcoded connection strings or API keys, recommending
DefaultAzureCredential. This aligns with best practices for identity management and auditing. - [Resource Lifecycle Management]: It emphasizes the use of context managers for both synchronous and asynchronous clients, ensuring that connections, sockets, and sensitive token caches are cleaned up properly after use.
- [Standard Dependency Management]: The skill references official Microsoft Azure libraries (
azure-keyvault-secrets,azure-keyvault-keys,azure-keyvault-certificates, andazure-identity) from standard package registries, facilitating a secure supply chain. - [Implementation of Least Privilege]: The documentation encourages the use of Azure Role-Based Access Control (RBAC) over legacy access policies, supporting the principle of least privilege for secret management.
Audit Metadata