azure-keyvault-secrets-ts
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- Standard SDK Implementation: The skill correctly implements the official Azure SDKs for secret and key management, ensuring consistent security behavior when interacting with Azure services.
- Authentication Security: It utilizes DefaultAzureCredential, a security-hardened authentication library that automatically handles token acquisition for various environments without requiring hardcoded credentials.
- Cryptographic Best Practices: The documentation provides comprehensive examples for RSA and EC key operations, including encryption, decryption, and rotation, which are essential for maintaining a secure cryptographic lifecycle.
- Data Management Surface: The skill includes patterns for backing up and restoring secrets via the local file system. While these are legitimate administrative functions, users should ensure the local storage for such backups is properly secured.
- Defensive Coding Patterns: The provided code samples and acceptance criteria explicitly define anti-patterns to avoid, such as the use of deprecated libraries and improper error handling, supporting a more secure implementation.
Audit Metadata