azure-keyvault-keys-ts
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Microsoft Azure SDK packages (
@azure/keyvault-keys,@azure/identity, and@azure/keyvault-secrets) for installation via npm. These are trusted libraries from a well-known service provider. - [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or private certificates were detected. The instructions correctly utilize
DefaultAzureCredentialfor secure authentication and suggest using environment variables for configuration. - [DATA_EXFILTRATION]: Network communication is limited to the official Azure Key Vault service domain (
vault.azure.net). There are no indications of data being sent to unauthorized or unknown external endpoints. - [SAFE]: The skill demonstrates standard cryptographic operations (encryption, signing, key rotation) following official documentation and developer best practices.
Audit Metadata