# Manage Azure Key Vault Secrets in TypeScript

Applications need consistent patterns for protecting secrets and cryptographic keys. This skill provides practical TypeScript guidance for Azure Key Vault operations.

## Install

```bash
npx skillstore add sickn33/azure-keyvault-secrets-ts
```

## Metadata

- Status: approved
- Slug: sickn33-azure-keyvault-secrets-ts
- Skillstore revision: r2
- Version status: missing
- Tree hash: 5008c9ce1e01cd6c977fd5b11ed66d068541aa12a76456a64eeb777467e2e7c7
- Author: sickn33
- GitHub username: sickn33
- License: MIT
- Repository: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/azure-keyvault-secrets-ts
- Ref: f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, env\_access
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/sickn33-azure-keyvault-secrets-ts
- Manifest: https://skillstore.pages.dev/api/skills/sickn33-azure-keyvault-secrets-ts/manifest

## Capabilities

- Installs Azure Key Vault Secrets and Identity packages.
- Configures DefaultAzureCredential and Azure vault endpoints.
- Creates, retrieves, lists, deletes, purges, and recovers secrets.
- Creates, rotates, lists, deletes, and purges cryptographic keys.
- Demonstrates encryption, decryption, signing, verification, and key wrapping.
- Covers key and secret backup, restore, and basic error handling.

## Use Cases

- Add Application Secrets: Create a TypeScript service that stores and retrieves configuration values through Azure Key Vault.
- Automate Key Rotation: Define key expiration and rotation policies for managed production encryption keys.
- Plan Recovery Operations: Implement backup, restore, soft-delete, purge, and recovery workflows for protected resources.

## Prompt Templates

### Retrieve One Secret

```
Show a minimal TypeScript example that authenticates with DefaultAzureCredential and retrieves {{secret_name}} from Azure Key Vault. Do not print the secret value.
```

### Manage Secret Lifecycle

```
Create a TypeScript workflow for setting, versioning, listing, deleting, and recovering {{secret_name}}. Include expiration, tags, and safe error handling.
```

### Configure Key Rotation

```
Design an Azure Key Vault key rotation policy for {{key_name}} with {{rotation_days}} days before expiry. Explain required permissions and operational checks.
```

### Build Cryptographic Workflow

```
Develop a TypeScript design using Azure Key Vault for encryption, decryption, signing, verification, key wrapping, backup, and recovery. Apply least-privilege access.
```

## Limitations

- Examples require a Node.js environment and do not support browser applications.
- Azure authentication, roles, vault policies, and network access must already be configured.
- The installation example omits the Key Vault Keys package used by later examples.
- Examples need environment-specific validation before production use.

## Best Practices

- Use managed identity or DefaultAzureCredential instead of embedded credentials.
- Grant only required secret and key operations to each workload.
- Set expiration, rotation, backup, recovery, and audit policies before production deployment.

## Anti Patterns

- Do not log secret values, decrypted plaintext, or unwrapped key material.
- Do not purge deleted secrets or keys without explicit recovery approval.
- Do not use broad vault permissions when a workload needs limited operations.

## Security Audit

- Audited at: 2026-07-23T20:41:05.23\+00:00
- Summary: All 44 static findings are false positives caused by Markdown fences, TypeScript template literals, expected Azure endpoints, and non-sensitive metadata access. However, two examples print retrieved secret or decrypted plaintext values, which can expose sensitive data through application logs.

## Stats

- Views: 140
- Downloads: 8
- Favorites: 0
- Popularity score: 0