azure-keyvault-keys-ts
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [Authentication Practices]: The skill utilizes DefaultAzureCredential from the @azure/identity package. This is a secure pattern that facilitates the use of Managed Identities in production environments, reducing the risk associated with hardcoded credentials.
- [Resource Management Capabilities]: The instructions enable the agent to perform full lifecycle management of secrets and keys, including creation, retrieval, and deletion. These capabilities are consistent with the skill's intended administrative purpose.
- [Data Ingestion Surface]: The skill reads secret values and key metadata from an external service (Azure Key Vault). While this is the intended use case, it is a point where external data enters the agent's context, which is a standard consideration for agents processing external information.
- [Official Supply Chain]: All dependencies and endpoint references target official Microsoft services and packages, aligning with expected vendor functionality.
Audit Metadata