CtrlK
BlogDocsLog inGet started
Tessl Logo

azure-keyvault-secrets-ts

Manage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets). Use when storing and retrieving application secrets or configuration values.

56

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills-claude/skills/azure-keyvault-secrets-ts/SKILL.md

The canonical home for this skill is azure-keyvault-secrets-ts in administrakt0r/AI-Agents-Safe-Coding-Skills

SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers strong, concrete code coverage of Key Vault operations but is long, scope-creeps beyond secrets into keys and crypto, and inlines bulk API reference that would benefit from separate reference files. Destructive purge operations lack validation checkpoints.

Suggestions

Split the Keys, Cryptographic Operations, and Backup/Restore sections into reference files under references/ and link to them from SKILL.md to improve progressive disclosure and reduce token load.

Add a validation/verification step before destructive operations (e.g. confirm the secret exists and is the intended target before calling purgeDeletedSecret) to lift workflow clarity above the destructive-operation cap.

Fix the import/install gaps: import KeyClient in the Authentication block and add @azure/keyvault-keys to the npm install command so the examples are fully executable as written.

Replace the filler 'When to Use' line with concrete trigger guidance or remove it to tighten conciseness.

DimensionReasoningScore

Conciseness

The body is mostly lean code examples with little concept padding, but it runs ~265 lines, expands beyond secrets into keys and cryptography, includes a redundant import listing ('Key Types'), and ends with a filler 'When to Use' line ('applicable to execute the workflow or actions described in the overview'). These trimmable pieces hold it at anchor 3 rather than 4.

3 / 5

Actionability

Code examples are concrete and largely copy-paste ready across create/get/list/delete/rotate operations, but there are minor gaps — KeyClient is used before being imported in the Authentication block, and CryptographyClient/imports rely on @azure/keyvault-keys which is absent from the install command. These small execution gaps place it at anchor 4 rather than 5.

4 / 5

Workflow Clarity

Operations are organized into clear sections, but destructive actions (purgeDeletedSecret, purgeDeletedKey) appear with no validation or verification checkpoint before the irreversible purge. Per the rubric, missing validation for destructive operations caps workflow clarity at 3 even though the sections are otherwise clear.

3 / 5

Progressive Disclosure

No bundle files exist in references/, scripts/, or assets/, and the entire ~265-line API reference (keys, cryptography, backup/restore) is inlined in SKILL.md rather than split into one-level-deep reference files. Section headers provide structure, but content that clearly belongs in separate files is inline, matching anchor 3.

3 / 5

Total

13

/

20

Passed

Description

73%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is well-formed, clearly scoped to a specific SDK, and includes an explicit 'Use when' trigger clause. It is slightly limited by generic 'what' phrasing and only two concrete actions.

DimensionReasoningScore

Specificity

Names the domain (Azure Key Vault Secrets) and two concrete actions ('storing and retrieving application secrets or configuration values'), but coverage is not comprehensive — no mention of rotation, deletion, or listing. Fits anchor 3 (1-2 concrete actions) rather than 4, which requires several specific actions.

3 / 5

Completeness

Answers both 'what' ('Manage secrets using Azure Key Vault Secrets SDK for JavaScript') and 'when' ('Use when storing and retrieving application secrets or configuration values'); the 'when' is explicit but the 'what' is somewhat generic and lacks multiple concrete trigger phrases, keeping it below anchor 5.

4 / 5

Trigger Term Quality

Includes natural terms users would say ('secrets', 'Azure Key Vault', 'configuration values', 'storing and retrieving') with good coverage; a few common synonyms (e.g. 'credentials', 'passwords') are missing, so it stops short of anchor 5.

4 / 5

Distinctiveness Conflict Risk

Tightly scoped to the Azure Key Vault Secrets SDK for JavaScript, a clear niche with distinct triggers and minimal risk of overlapping with unrelated skills.

5 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.