CtrlK
BlogDocsLog inGet started
Tessl Logo

azure-keyvault-keys-ts

Manage cryptographic keys using Azure Key Vault Keys SDK for JavaScript (@azure/keyvault-keys). Use when creating, encrypting/decrypting, signing, or rotating keys.

61

Quality

72%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/azure-keyvault-keys-ts/SKILL.md

The canonical home for this skill is azure-keyvault-keys-ts in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is a well-structured, actionable API catalog with strong code examples, but it suffers from scope drift (large Secrets sections in a Keys skill), an incomplete install step, missing validation around destructive operations, and a meaningless closing "When to Use" filler line. Splitting reference material into bundle files and adding verification steps would meaningfully raise the score.

Suggestions

Remove or relocate the Secrets Operations sections — this skill is scoped to @azure/keyvault-keys; if secrets are needed, either drop them or split into a separate azure-keyvault-secrets skill/reference file.

Add @azure/keyvault-secrets to the install command (or remove its usage) so the code examples are actually executable as written.

Add validation checkpoints around destructive operations (e.g., confirm the key exists before beginDeleteKey, verify purge succeeded, list deleted items after recovery) and replace the filler "When to Use" line with concrete trigger guidance or remove it.

DimensionReasoningScore

Conciseness

The body is mostly tight code examples, but it inlines extensive Secrets operations that are off-scope for a keys skill, repeats the CryptographyClient import, and ends with the filler line "This skill is applicable to execute the workflow or actions described in the overview" — unnecessary content that could be tightened.

3 / 5

Actionability

Concrete, copy-paste-ready TypeScript covers create/get/list/rotate/delete/encrypt/decrypt/sign/verify/wrap/backup with error handling, but the code uses SecretClient and imports @azure/keyvault-secrets without listing it in the install step, a minor executability gap keeping it below 5.

4 / 5

Workflow Clarity

Operations are grouped under clear headers but there is no sequenced multi-step workflow, and destructive operations (beginDeleteKey, purgeDeletedKey, purgeDeletedSecret) lack validation checkpoints or feedback loops; per the destructive-operations cap this cannot exceed 3.

3 / 5

Progressive Disclosure

Section headers organize the content, but the file is a long monolithic inline API reference (~270 lines) with secrets, keys, and crypto material that could be split into separate reference files, and it signals no one-level-deep references to deeper material.

3 / 5

Total

13

/

20

Passed

Description

87%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is strong: third-person, concise, with an explicit "Use when" trigger and concrete action list tied to a clearly distinct Azure Key Vault Keys niche. Minor specificity gaps (missing list/delete/backup operations) keep it just short of a perfect specificity score.

DimensionReasoningScore

Specificity

Quotes "creating, encrypting/decrypting, signing, or rotating keys" list several concrete actions, but coverage has gaps (no listing, deletion, backup/restore, or wrap/unwrap), matching the anchor with minor gaps rather than the comprehensive 5.

4 / 5

Completeness

It clearly states the "what" ("Manage cryptographic keys using Azure Key Vault Keys SDK") and an explicit "Use when..." trigger clause listing concrete scenarios, matching the anchor that answers both what and when.

5 / 5

Trigger Term Quality

Natural action phrases like "encrypting/decrypting", "signing", and "rotating keys" give good keyword coverage, but the description leans on technical jargon ("SDK for JavaScript", "@azure/keyvault-keys") and misses a few common synonyms, fitting just below the comprehensive 5.

4 / 5

Distinctiveness Conflict Risk

The Azure Key Vault Keys SDK niche with package-scoped triggers ("@azure/keyvault-keys") is clearly distinct from generic crypto or secret skills, giving minimal conflict risk.

5 / 5

Total

18

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.