CtrlK
BlogDocsLog inGet started
Tessl Logo

azure-keyvault-secrets-ts

Manage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets). Use when storing and retrieving application secrets or configuration values.

59

Quality

69%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/azure-keyvault-secrets-ts/SKILL.md

The canonical home for this skill is azure-keyvault-secrets-ts in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

65%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is lean and packed with concrete, mostly-executable code, but it has two genuine gaps: the destructive secret/key workflows lack validation checkpoints (capping workflow clarity), and everything is inlined into one long file with no reference bundle. The install command also omits the keys/crypto packages that the examples rely on.

Suggestions

Add validation/verification checkpoints to the destructive workflows — e.g., confirm a secret exists before deleting, verify deletion succeeded, and require explicit confirmation before purge (permanent deletion) — so workflow clarity can exceed 3.

Fix the install command to include '@azure/keyvault-keys' (and add the missing 'KeyClient' import in the Authentication section) so the code examples are fully copy-paste runnable.

Move the bulk API-reference material (Key Types imports, Cryptographic Operations, full attribute-option examples) into a separate references file linked from SKILL.md, keeping the body as a concise overview.

DimensionReasoningScore

Conciseness

The body is mostly lean code examples with minimal concept-explaining prose (no 'what is Key Vault' padding). It is below 5 because of minor trimmable content: a redundant Key Types import block, some duplicated attribute examples, and a filler 'When to Use' sentence. It is above 3 because nothing is severely padded.

4 / 5

Actionability

Provides extensive concrete, mostly executable TypeScript code across secrets, keys, and crypto operations. It is below 5 because the code is not fully copy-paste ready: the Authentication section instantiates 'KeyClient' and the crypto section imports '@azure/keyvault-keys', but neither 'KeyClient' nor '@azure/keyvault-keys' appear in the install command. It is above 3 because the guidance is concrete and largely runnable.

4 / 5

Workflow Clarity

Operations are presented in a recognizable sequence, but destructive operations (beginDeleteSecret, purgeDeletedSecret, beginRecoverDeletedSecret, key rotation) have no validation or verification checkpoints. Per the rubric, missing validation in destructive/batch workflows caps this dimension at 3; it cannot rise to 4 despite clear ordering.

3 / 5

Progressive Disclosure

The file is well-sectioned but is a single ~265-line monolith with no bundle files (references/scripts/assets absent), inlining API-reference content (Key Types imports, extensive crypto operations) that would be better split into separate reference files. It is above 2 because section headers provide real structure, but below 4 because no one-level-deep references exist and bulk reference content is inline.

3 / 5

Total

14

/

20

Passed

Description

73%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly states what the skill does and when to use it, with a distinct, package-scoped niche that minimizes conflict risk. Its main weakness is moderate specificity and generic trigger phrasing rather than comprehensive, concrete trigger terms.

DimensionReasoningScore

Specificity

Names the domain ('Manage secrets using Azure Key Vault Secrets SDK') and lists 2 concrete actions ('storing and retrieving application secrets or configuration values'), but coverage is not comprehensive. It is above 2 because the actions are concrete, not generic, but below 4 because only store/retrieve are enumerated.

3 / 5

Completeness

Provides both a 'what' (manage secrets via the SDK) and a 'when' ('Use when storing and retrieving application secrets or configuration values'). It is below 5 because the 'when' clause is fairly generic and does not enumerate concrete trigger phrases the way the 5-anchor example does.

4 / 5

Trigger Term Quality

Includes natural keywords a user would say — 'secrets', 'storing and retrieving', 'application secrets', 'configuration values', 'Key Vault' — giving good coverage. It is below 5 because common synonyms and variations (e.g., 'vault', '.azure', broader phrasings) are not present.

4 / 5

Distinctiveness Conflict Risk

Scoped precisely to 'Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets)', a clear niche with distinct triggers and minimal overlap risk with other skills. Re-reading the 4 anchor (minor overlap with closely related skills) does not fit better since the package-level scoping is highly specific.

5 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.