skills.rest
SandboxServers
SandboxServersOFFICIAL
Explore all skills by this author →
GitHub

secrets-management-audit

Audit Azure Key Vault configurations, secret rotation, and leaked credentials.

1|Updated Apr 19, 2026
Search Tags:#RBAC#security audit#secrets management#Azure Key Vault#secret rotation
One-click install
npx skills add https://github.com/SandboxServers/github-copilot-agents --skill secrets-management-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-management-audit
Source: https://github.com/SandboxServers/github-copilot-agents/tree/main/skills/secrets-management-audit.skill
Command: npx skills add https://github.com/SandboxServers/github-copilot-agents --skill secrets-management-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of maintaining secure secrets management practices in Azure workloads, providing a comprehensive checklist for audit and configuration best practices.

Core Features & Use Cases

  • Audit Checklist: Offers a detailed audit checklist for secrets management, covering key vault configurations, access patterns, secret rotation, and detection of leaked credentials.
  • Key Vault Configuration: Provides guidance on setting up Azure Key Vault with soft delete, purge protection, private endpoints, and RBAC roles.
  • Access Patterns: Details how different Azure services access Key Vault, including managed identity, secrets store CSI driver, and Azure SDK.
  • Secret Rotation: Explains automated and manual rotation methods for secrets, with frequency guidelines for different types of secrets.

Quick Start

Run the 'secrets-management-audit' skill to initiate a full secrets management audit for your Azure environment.

Frequently Asked Questions about secrets-management-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Azure Key Vault configurations for security best practices?▼

To audit Azure Key Vault configurations, run a comprehensive check covering soft delete, purge protection, private endpoints, and RBAC roles to ensure adherence to security best practices.

What is the best way to set up secret rotation in Azure environments?▼

The best way to set up secret rotation is to use automated and manual rotation methods with frequency guidelines tailored to different types of secrets.

How do Azure services access Key Vault using managed identity and SDK?▼

Azure services access Key Vault using managed identities, the secrets store CSI driver, and Azure SDK, with access patterns detailed to ensure secure retrieval.

Can I detect leaked credentials in my Azure workloads?▼

Yes, you can detect leaked credentials by performing a comprehensive audit on access patterns and Key Vault configurations to identify security gaps.

Does Azure Key Vault support RBAC for secrets management?▼

Yes, Azure Key Vault supports RBAC roles, which are assessed during a security audit to ensure proper access control and adherence to best practices.

Why does my Azure security audit need to check soft delete and purge protection?▼

Your Azure security audit needs to check soft delete and purge protection because they are critical Key Vault configurations that prevent accidental or malicious deletion of secrets.

Related Skills

theslashdojotheslashdojo

key-vault

Automate Azure Key Vault lifecycle management with the Azure CLI.

Official
Intermediate
JayRHaJayRHa
3

secrets-manager

Detect, prevent, and remediate leaked credentials across codebases.

Community
Advanced
julianobarbosajulianobarbosa
7

keyvault-csi-driver

Mount Azure Key Vault secrets into Kubernetes pods via SecretProviderClass.

Community
Advanced
InnerScopeHearingInnerScopeHearing

fleet-secret-custodian

Manage Azure Key Vault secret lifecycles with autonomous key rotation and tamper-evident audit logging.

Official
Advanced