Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Python SDK for Azure Key Vault covering secrets, cryptographic keys, and certificates. Provides four client classes: SecretClient, KeyClient, CryptographyClient, and CertificateClient. Supports both sync and async patterns with soft-delete and version tracking.
Centralizes secret management with RBAC, versioning, soft-delete, and HSM-backed key storage that environment variables or config files cannot provide.
When to use it
- Retrieving database passwords at app startup without hardcoding credentials
- Encrypting sensitive user data with RSA keys managed in the vault
- Rotating API keys across microservices using secret versioning
- Managing TLS certificates for web applications
- Signing and verifying data payloads in distributed systems
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: retrieve the database connection string stored in Azure Key Vault
- 1Authenticate using DefaultAzureCredential
- 2Initialize SecretClient with the vault URL from AZURE_KEYVAULT_URL
- 3Call get_secret with the target secret name
- 4Return the secret value to the calling application
Database connection string retrieved securely at runtime without hardcoded credentials
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.