azure-keyvault-py

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [Secure Authentication Practices]: The skill explicitly instructs developers to avoid hardcoded connection strings or API keys, recommending DefaultAzureCredential. This aligns with best practices for identity management and auditing.
  • [Resource Lifecycle Management]: It emphasizes the use of context managers for both synchronous and asynchronous clients, ensuring that connections, sockets, and sensitive token caches are cleaned up properly after use.
  • [Standard Dependency Management]: The skill references official Microsoft Azure libraries (azure-keyvault-secrets, azure-keyvault-keys, azure-keyvault-certificates, and azure-identity) from standard package registries, facilitating a secure supply chain.
  • [Implementation of Least Privilege]: The documentation encourages the use of Azure Role-Based Access Control (RBAC) over legacy access policies, supporting the principle of least privilege for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:51 PM
Security Audit — agent-trust-hub — azure-keyvault-py