📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills azure-keyvault-secrets-ts
📦
azure-keyvault-secrets-ts
Content revision r2 High Risk ⚙️ External commands🌐 Network access🔑 Env variables
Manage Azure Key Vault Secrets in TypeScript
Applications need consistent patterns for protecting secrets and cryptographic keys. This skill provides practical TypeScript guidance for Azure Key Vault operations.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "azure-keyvault-secrets-ts" from https://skillstore.io/skills/sickn33-azure-keyvault-secrets-ts.md and its manifest at https://skillstore.io/api/skills/sickn33-azure-keyvault-secrets-ts/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "azure-keyvault-secrets-ts". Retrieve the latest database password without exposing it.
Expected outcome:
A TypeScript workflow authenticates with managed credentials, retrieves the named secret, and reports success without logging its value.
Using "azure-keyvault-secrets-ts". Create a rotation policy for a production signing key.
Expected outcome:
- Rotate the key 30 days before expiration.
- Expire each key version after 90 days.
- Grant only required signing and rotation permissions.
Using "azure-keyvault-secrets-ts". Handle a missing secret safely.
Expected outcome:
The operation distinguishes a missing secret from other failures, returns a clear status, and rethrows unexpected errors.
Security Audit
High Riskv5 • 7/23/2026 Open versioned report
All 44 static findings are false positives caused by Markdown fences, TypeScript template literals, expected Azure endpoints, and non-sensitive metadata access. However, two examples print retrieved secret or decrypted plaintext values, which can expose sensitive data through application logs.
1
Files scanned
280
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Sensitive Values Written to Logs
The examples print a retrieved secret value and decrypted plaintext, which can persist confidential data in terminals or centralized logs.
Both calls directly pass sensitive plaintext values to console.log, so the disclosure path is explicit.
Risk Factors
⚙️ External commands (38)
SKILL.md:15-18 SKILL.md:18-22 SKILL.md:22-26 SKILL.md:26-30 SKILL.md:30-35 SKILL.md:35-39 SKILL.md:39-45 SKILL.md:45-55 SKILL.md:55-59 SKILL.md:59-68 SKILL.md:68-72 SKILL.md:72-81 SKILL.md:81-85 SKILL.md:85-96 SKILL.md:96-102 SKILL.md:102-119 SKILL.md:119-123 SKILL.md:123-126 SKILL.md:126-130 SKILL.md:130-134 SKILL.md:134-138 SKILL.md:138-147 SKILL.md:147-151 SKILL.md:151-157 SKILL.md:157-163 SKILL.md:163-171 SKILL.md:171-175 SKILL.md:175-189 SKILL.md:189-193 SKILL.md:193-205 SKILL.md:205-209 SKILL.md:209-215 SKILL.md:215-219 SKILL.md:219-227 SKILL.md:227-231 SKILL.md:231-248 SKILL.md:248-252 SKILL.md:252-262
🌐 Network access (2)
🔑 Env variables (2)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-azure-keyvault-secrets-ts/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-azure-keyvault-secrets-ts?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-azure-keyvault-secrets-ts?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-azure-keyvault-secrets-ts/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-azure-keyvault-secrets-ts.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). azure-keyvault-secrets-ts security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-azure-keyvault-secrets-ts/audits/5BibTeX citation
@techreport{sickn33-sickn33-azure-keyvault-secrets-ts-2026,
author = {sickn33},
title = {azure-keyvault-secrets-ts security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-azure-keyvault-secrets-ts/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-keyvault-secrets-ts security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-azure-keyvault-secrets-ts/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-azure-keyvault-secrets-ts:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Add Application Secrets
Create a TypeScript service that stores and retrieves configuration values through Azure Key Vault.
Automate Key Rotation
Define key expiration and rotation policies for managed production encryption keys.
Plan Recovery Operations
Implement backup, restore, soft-delete, purge, and recovery workflows for protected resources.
Try These Prompts
Retrieve One Secret
Show a minimal TypeScript example that authenticates with DefaultAzureCredential and retrieves {{secret_name}} from Azure Key Vault. Do not print the secret value.Manage Secret Lifecycle
Create a TypeScript workflow for setting, versioning, listing, deleting, and recovering {{secret_name}}. Include expiration, tags, and safe error handling.Configure Key Rotation
Design an Azure Key Vault key rotation policy for {{key_name}} with {{rotation_days}} days before expiry. Explain required permissions and operational checks.Build Cryptographic Workflow
Develop a TypeScript design using Azure Key Vault for encryption, decryption, signing, verification, key wrapping, backup, and recovery. Apply least-privilege access.
Best Practices
- Use managed identity or DefaultAzureCredential instead of embedded credentials.
- Grant only required secret and key operations to each workload.
- Set expiration, rotation, backup, recovery, and audit policies before production deployment.
Avoid
- Do not log secret values, decrypted plaintext, or unwrapped key material.
- Do not purge deleted secrets or keys without explicit recovery approval.
- Do not use broad vault permissions when a workload needs limited operations.
Frequently Asked Questions
Which runtime does this skill support?
The examples target Node.js with TypeScript or JavaScript. Azure Key Vault SDK operations shown here do not support browsers.
How does authentication work?
DefaultAzureCredential selects supported local or managed Azure credentials. The active identity still needs suitable vault permissions.
Can it manage both secrets and keys?
Yes. It covers secret lifecycle operations, key lifecycle operations, and cryptographic methods using Azure Key Vault SDK clients.
Does it configure Azure roles automatically?
No. You must configure Azure roles, access policies, vault networking, and identities outside these examples.
Can deleted values be recovered?
Yes, when soft-delete and retention settings permit recovery. Purged values cannot be recovered through the demonstrated methods.
Is the guidance production ready?
It provides implementation patterns, but each workflow requires security review, testing, monitoring, and environment-specific configuration before production use.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/azure-keyvault-secrets-tsRef
f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526
Maintenance freshness
7/26/2026
Usage
6 downloads · 140 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
senior-security
81Strengthen Application Security Reviews
by alirezarezvani
Security reviews often lack consistent checklists and reusable workflows. This skill provides security review scaffolds, reference guidance, and simple reporting scripts for Claude, Codex, and Claude Code.
Security & Compliance View
📦
playwright-testing
86Build Reliable Playwright Tests
by C0ntr0lledCha0s
Playwright test suites can become flaky, slow, and difficult to maintain. This skill provides practical patterns for locators, fixtures, page objects, debugging, mocking, and configuration.
Coding & Development View
📦
starknet-js
83Build Starknet Apps with starknet.js
by internet-court
Starknet integrations require precise provider, account, transaction, and fee handling across several APIs. This skill provides focused starknet.js v9.x patterns for reliable TypeScript applications.
Coding & Development View
📦
vue-best-practices
82Improve Vue 3 Code Quality
by vuejs-ai
Vue projects often collect reactivity, component, and performance mistakes over time. This skill gives targeted Vue 3 guidance for safer patterns and clearer code.
Coding & Development View
📦
react-dev
82Build Type-Safe React Components
by softaworks
React TypeScript work often needs precise event, hook, and route types. This skill provides focused patterns for typed components, React 19 APIs, and routing.
Coding & Development View
📦
vue-options-api-best-practices
81Improve Vue Options API Code
by vuejs-ai
Vue Options API projects often lose type safety and correct this binding. This skill gives focused rules for safer Vue 3 components.
Coding & Development View