google-cloud-secret-manager-rust
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of the official
google-cloud-secretmanager-v1Rust crate from the Google Cloud Rust repository, which is a trusted source. - [COMMAND_EXECUTION]: The skill includes a shell script (
scripts/create-secret-module.sh) used to scaffold a Rust module. This script performs routine file system operations, such as creating directories and writing a static code template to a user-specified path (src/secret.rsby default). - [EXTERNAL_DOWNLOADS]: The skill references documentation and package metadata from well-known services including Crates.io, Docs.rs, and official Google Cloud GitHub repositories. These references are used for library selection and configuration guidelines.
- [DATA_EXFILTRATION]: The instructions explicitly promote security best practices, such as using Application Default Credentials (ADC), avoiding the use of long-lived service account keys, and implementing strict policies against logging secret values or environment variables.
Audit Metadata