Agent Skill · 云服务

azure-key-vault（Azure KEY vault 部署）

用于辅助云资源、部署、容器、基础设施和运维自动化任务。它适合让 Agent 检查配置、整理部署步骤、分析资源状态、生成排障思路或辅助云服务接入。使用时需要明确目标环境、账号权限、区域和资源组，区分本地测试与生产操作；涉及删除资源、重启服务、修改网络或权限配置时，应先确认影响范围。

azure-key-vault 是云服务类 Agent Skill，可用宿主为 Codex、Claude、Cursor、Gemini CLI，通过GitHub 仓库获取，权限为接触敏感数据；许可证信息还不明确，第三方扫描有提醒项，按安装量在云服务类的 479 个 Skill 里排第 228。

总安装 1,285周安装 53GitHub Stars 519下载 420核验 2026-05-01

云服务接触敏感数据 GitHub 仓库未标认证来源可访问许可证需确认审计提醒 Codex Claude Cursor Gemini CLI

安装说明

本站只整理中文说明，不托管安装包，也不代用户安装。

GitHub

许可证: unknown

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手，先确认命令和权限，再让它执行。

请帮我安装这个 Agent Skill：azure-key-vault（Azure KEY vault 部署）
来源仓库：https://github.com/microsoftdocs/agent-skills
仓库路径：skills/azure-key-vault
安装命令：
npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-key-vault
安装前请先检查当前环境是否支持对应 CLI，并向我确认将要执行的命令、安装目录、联网范围和文件读写权限；确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill；本站只展示命令，不托管安装包，也不自动执行。

skills.shnpx skills

npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-key-vault

这个 Skill 是做什么的

云服务类 Skill 对接各家云平台的接口，用来查询资源、估算成本和执行变更。

为 Azure Key Vault 提供专业部署与管理支持，涵盖密钥、证书和机密的安全存储。适用于需要集中管理敏感信息的云原生应用，如 AKS、App Service 等服务集成。提供基于 CLI 和 SDK 的操作示例，支持客户托管密钥（CMK）和合规审计需求。

操作前需确认订阅权限与角色分配，防止越权访问或误删重要机密资产。azure-key-vault 属于云服务类 Skill，可作为该场景下的辅助能力补充。

来源仓库内路径：skills/azure-key-vault

上手步骤

4 步

1
确认自己的宿主工具
公开资料标注支持 Codex、Claude、Cursor、Gemini CLI；先确认自己用的是其中之一，再按对应工具的 Skills 目录放置。
2
拿到安装命令
可以直接复制的命令是 npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-key-v…；命令里的占位符换成自己的路径或密钥再执行。
3
安装后重启宿主
命令执行完要完全退出宿主工具再打开，让新装的 Skill 被重新扫描到，否则列表里可能看不到。
4
按最小权限试用
它需要接触敏感数据，先在测试目录或测试账号里跑，确认没问题再放到正式项目。

常见问题

6 条

azure-key-vault 怎么安装？

在终端执行 npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-key-vault。装完完全退出宿主工具再打开，让它重新扫描本地 Skill。

azure-key-vault 支持哪些 AI 工具？

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录，一般也能手动放进去，但要自己确认触发方式是否一致。

azure-key-vault 需要什么权限？

权限级别是接触敏感数据。该 Skill 可能接触密钥、Token、环境变量或敏感配置，应进入高风险复核队列，默认不自动发布。

azure-key-vault 是免费的吗？

公开资料没有标注明确许可证，收费和商用限制都无法确认。正式使用前请到来源仓库核对授权说明。

azure-key-vault 用的人多吗？

公开数据是累计安装 1,285 次，近一周安装 53 次，下载 420 次，GitHub 519 星。这些数字来自第三方目录统计，只能当作热度参考，不代表质量或安全性。

azure-key-vault 安全吗？

第三方扫描有提醒项，说明存在需要人工确认的行为。安装前请打开源码看清它读了什么、联网到哪里。

值得选的地方和要先想清楚的地方

值得选的地方

同时适配 4 种工具，换客户端不用重新找替代品。

先想清楚的地方

需要接触敏感数据，装到常用环境前要先评估影响面。
许可证没有明确标注，能不能商用、能不能再分发都不确定。
第三方扫描存在提醒项或未通过项，需要人工逐条确认。
第三方目录整理，版本更新和行为细节以来源仓库为准。

适不适合你

更适合

已经在用 Codex，想直接扩展它能力的人。
需要处理云服务类任务、又不想每次都手写提示词的人。

不太适合

环境里有大量密钥、凭证，不方便给第三方 Skill 读取的人。
需要明确授权才能用到公司项目里的场景。
需要厂商级技术支持和 SLA 的生产系统。

云服务类 Skill 对比

6 个同类

Skill	总安装	GitHub 星	权限	许可证	扫描
azure-deploy Azure 部署 · Codex、Claude	6,641,856	764	调用外部服务	未明确	通过
azure-diagnostics Azure diagnostics 问题管理 · Codex、Claude	6,575,520	764	调用外部服务	未明确	通过
azure-aigateway Azure aigateway 部署 · Codex、Claude	6,553,272	764	调用外部服务	未明确	有提醒
azure-ai Azure AI 搜索 · Codex、Claude	6,514,128	764	调用外部服务	未明确	通过
azure-cloud-migrate Azure Cloud migrate 部署 · Codex、Claude	6,506,784	764	调用外部服务	未明确	有提醒
azure-key-vault Azure KEY vault 部署 · 本页	1,285	519	接触敏感数据	未明确	有提醒

按安装量取同分类前几名；数字来自第三方目录统计，只作热度参考，不代表质量结论。

SKILL.md 原文

Azure Key Vault Skill

This skill provides expert guidance for Azure Key Vault. Covers troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L36-L44	Diagnosing and fixing Key Vault errors: REST/API error codes, access policy failures, Private Link misconfig, and Azure Policy enforcement issues.
Best Practices	L45-L55	Guidance on BYOK/HSM key import, key/secret security best practices, disaster recovery for Managed HSM, and automating single/dual-credential secret rotation in Key Vault.
Decision Making	L56-L62	Guidance on planning key and HSM capacity, scaling, and migrating cryptographic workloads or Key Vault access control from access policies to RBAC
Limits & Quotas	L63-L73	Key Vault/Managed HSM limits: throttling, quotas, size constraints, logging latency, soft-delete behavior, and network/IP firewall configuration.
Security	L74-L99	Securing Azure Key Vault and Managed HSM: auth, RBAC vs access policies, firewalls, Private Link, soft-delete, backups, and security best practices for keys, secrets, and certificates.
Configuration	L100-L123	Configuring Key Vault and Managed HSM: monitoring, alerts, logging, policies, key types/rotation, secure key release, replication, and special secret formats (e.g., multiline).
Integrations & Coding Patterns	L124-L151	Using Key Vault from code and services: JS/Go/.NET/Python client patterns for keys/secrets/certs, rotation and backup, plus integrations with Event Grid, Logic Apps, Databricks, DigiCert, and TLS offload.
Deployment	L152-L155	How to deploy and provision Azure Key Vault and Managed HSM (vaults, keys, secrets) using ARM templates, Bicep, Terraform, Azure CLI, and PowerShell

Troubleshooting

Topic	URL
Resolve common Azure Key Vault error codes	https://learn.microsoft.com/en-us/azure/key-vault/general/common-error-codes
Diagnose and fix Azure Key Vault Private Link configuration issues	https://learn.microsoft.com/en-us/azure/key-vault/general/private-link-diagnostics
Interpret Azure Key Vault REST API error codes	https://learn.microsoft.com/en-us/azure/key-vault/general/rest-error-codes
Troubleshoot Azure Policy enforcement on Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/troubleshoot-azure-policy-for-key-vault
Troubleshoot Azure Key Vault access policy failures	https://learn.microsoft.com/en-us/azure/key-vault/general/troubleshooting-access-issues

Best Practices

Topic	URL
Plan and execute BYOK HSM key transfers to Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/hsm-protected-keys
Implement BYOK HSM-protected keys for Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/hsm-protected-keys-byok
Apply security best practices for Azure Key Vault keys	https://learn.microsoft.com/en-us/azure/key-vault/keys/secure-keys
Execute disaster recovery for Azure Managed HSM disruptions	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/disaster-recovery-guide
Generate and import BYOK HSM keys into Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/hsm-protected-keys-byok
Automate single-credential secret rotation with Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation
Automate dual-credential secret rotation with Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation-dual

Decision Making

Topic	URL
Plan and execute migration of cryptographic key workloads	https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads
Migrate Azure Key Vault from access policies to RBAC	https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-migration
Plan capacity and scaling for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/scaling-guidance

Limits & Quotas

Topic	URL
Configure and interpret Azure Key Vault logging latency	https://learn.microsoft.com/en-us/azure/key-vault/general/logging
Understand and handle Azure Key Vault throttling limits	https://learn.microsoft.com/en-us/azure/key-vault/general/overview-throttling
Review Azure Key Vault and Managed HSM service limits	https://learn.microsoft.com/en-us/azure/key-vault/general/service-limits
Configure Managed HSM IP firewall and network security	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/configure-network-security
Review Azure Managed HSM service limits and quotas	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/service-limits
Understand soft-delete behavior and constraints in Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/soft-delete-overview
Understand Azure Key Vault secret size limits	https://learn.microsoft.com/en-us/azure/key-vault/secrets/about-secrets

Security

Topic	URL
Apply security best practices for Key Vault certificates	https://learn.microsoft.com/en-us/azure/key-vault/certificates/secure-certificates
Allow Azure Key Vault access from clients behind firewalls	https://learn.microsoft.com/en-us/azure/key-vault/general/access-behind-firewall
Prepare for Azure Key Vault RBAC default and API retirement	https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default
Assign Key Vault access policies with Azure CLI	https://learn.microsoft.com/en-us/azure/key-vault/general/assign-access-policy
Configure authentication to Azure Key Vault with Entra ID	https://learn.microsoft.com/en-us/azure/key-vault/general/authentication
Configure network security, firewalls, and Private Link for Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/network-security
Secure Key Vault access with virtual network service endpoints	https://learn.microsoft.com/en-us/azure/key-vault/general/overview-vnet-service-endpoints
Integrate Azure Key Vault with Private Link endpoints	https://learn.microsoft.com/en-us/azure/key-vault/general/private-link-service
Choose Azure RBAC vs access policies for Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-access-policy
Configure Azure RBAC permissions for Key Vault access	https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide
Apply security best practices to Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/secure-key-vault
Configure and use Azure Key Vault soft-delete safely	https://learn.microsoft.com/en-us/azure/key-vault/general/soft-delete-overview
Manage access control and authorization for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/access-control
Configure Azure Resource Manager access to Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/authorize-azure-resource-manager
Configure backup and selective restore for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/backup-restore
Use Managed HSM built-in local RBAC roles	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/built-in-roles
Implement secure access control for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/how-to-secure-access
Configure network security and firewall for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/network-security
Configure Managed HSM private endpoints with Private Link	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/private-link
Manage data plane RBAC roles for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/role-management
Harden Azure Managed HSM with security controls	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/secure-managed-hsm
Apply security best practices for Azure Key Vault secrets	https://learn.microsoft.com/en-us/azure/key-vault/secrets/secure-secrets

Configuration

Topic	URL
Configure health and throttling alerts for Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/alert
Formulate authenticated JSON requests to Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/authentication-requests-and-responses
Apply Azure Policy to govern Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/azure-policy
Enable and configure Azure Key Vault diagnostic logging	https://learn.microsoft.com/en-us/azure/key-vault/general/howto-logging
Configure monitoring for Azure Key Vault with Azure Monitor	https://learn.microsoft.com/en-us/azure/key-vault/general/monitor-key-vault
Reference for Azure Key Vault monitoring metrics and logs	https://learn.microsoft.com/en-us/azure/key-vault/general/monitor-key-vault-reference
Create Azure Key Vault using ARM template settings	https://learn.microsoft.com/en-us/azure/key-vault/general/vault-create-template
Use supported key types and algorithms in Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details
Follow BYOK specification for importing HSM keys to Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/byok-specification
Configure automatic cryptographic key rotation in Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation
Author secure key release policies in Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/policy-grammar
Configure health and performance alerts for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/configure-alerts
Set up key auto-rotation in Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/key-rotation
Configure logging and audit events for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/logging
Monitor Azure Managed HSM with Azure Monitor	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/logging-azure-monitor
Configure multi-region replication for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/multi-region-replication
Author secure key release policies for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/policy-grammar
Configure soft-delete and purge protection in Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/recovery
Integrate Managed HSM logs with Microsoft Sentinel	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/sentinel
Configure Azure Key Vault to store multiline secrets	https://learn.microsoft.com/en-us/azure/key-vault/secrets/multiline-secrets

Integrations & Coding Patterns

Topic	URL
Integrate Azure Key Vault with DigiCert CA	https://learn.microsoft.com/en-us/azure/key-vault/certificates/how-to-integrate-certificate-authority
Use Go Key Vault certificates client library	https://learn.microsoft.com/en-us/azure/key-vault/certificates/quick-create-go
Use.NET Key Vault certificates client library	https://learn.microsoft.com/en-us/azure/key-vault/certificates/quick-create-net
Use Python Key Vault certificates client library	https://learn.microsoft.com/en-us/azure/key-vault/certificates/quick-create-python
Trigger Logic Apps from Key Vault events via Event Grid	https://learn.microsoft.com/en-us/azure/key-vault/general/event-grid-logicapps
Integrate Azure Key Vault events with Azure Event Grid	https://learn.microsoft.com/en-us/azure/key-vault/general/event-grid-overview
Handle Azure Key Vault notifications with Event Grid and Automation	https://learn.microsoft.com/en-us/azure/key-vault/general/event-grid-tutorial
Access Blob Storage via Databricks and Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/integrate-databricks-blob-storage
Back up, delete, and restore keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-backup-delete-restore-key
Create and rotate Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-create-update-rotate-key
Enable or disable Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-enable-disable-key
Encrypt and decrypt with Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-encrypt-decrypt-key
Retrieve Azure Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-get-key
Import keys into Azure Key Vault with JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-import-key
List Azure Key Vault keys using JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-list-key-version
Sign and verify with Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-sign-verify-key
Use Managed HSM TLS Offload library with F5 and Nginx	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/tls-offload-library
Back up and restore Key Vault secrets in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-backup-secrets
Delete and purge Key Vault secrets with JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-delete-secret
Enable or disable Key Vault secrets using JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-enable-disable-secret
List and find Key Vault secrets using JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-find-secret
Retrieve Azure Key Vault secrets with JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-get-secret
Use Azure Key Vault secrets from JavaScript applications	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-get-started
Create, update, and rotate Key Vault secrets with JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-set-update-rotate-secret

Deployment

Topic	URL
Provision Key Vault and key using Terraform	https://learn.microsoft.com/en-us/azure/key-vault/keys/quick-create-terraform

适合场景

Azure 资源规划

云服务升级

基础设施检查

企业云环境自动化

能力概览

能力 1

整理 Azure 服务操作流程

能力 2

提示 CLI/MCP 前置条件

能力 3

辅助云资源检查和规划

能力 4

保留官方服务来源线索

平台分布

Codex

37.09%

按下载量换算156

Claude

29.75%

按下载量换算125

Cursor

17.72%

按下载量换算74

Gemini CLI

9.35%

按下载量换算39

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

可疑

权限和风险

接触敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置，应进入高风险复核队列，默认不自动发布。

安装前确认

本站仅展示第三方公开信息，不托管安装包，不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。来源安全扫描存在提醒或未通过项，安装前请自行复核。目前只有一个公开来源，建议同时核对源仓库。

继续浏览同类 Skills

更多云服务 Skills（479）返回 Skills 目录

上一个 Skill

azure-iot-operations（Azure IOT operations 部署）

microsoftdocs/agent-skills

下一个 Skill

azure-keyvault（Azure keyvault 部署）

bagelhole/devops-security-agent-skills