azure-keyvault-secrets-ts
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official Microsoft packages (
@azure/keyvault-secrets,@azure/identity) from the public npm registry for interacting with Azure services. - [COMMAND_EXECUTION]: Provides standard documentation for setting up environment variables and executing common secret and key management operations via official SDK methods.
- [DATA_EXFILTRATION]: While the skill manages sensitive secrets, its operations are restricted to the official Azure Key Vault environment as defined by user-provided configuration (e.g.,
KEY_VAULT_URL). There are no patterns suggesting data is being sent to unauthorized third-party destinations. - [SAFE]: The skill follows security best practices such as using
DefaultAzureCredentialand recommending the use of expiration dates and rotation policies.
Audit Metadata