azure-keyvault-certificates-rust

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • Standard Dependency Management: The skill instructs the use of cargo add to manage official libraries such as azure_security_keyvault_certificates and azure_identity. This follows standard Rust development practices and utilizes the vendor's official distribution channels.
  • Supply Chain Security Guidance: The documentation includes a specific security warning regarding unofficial or community crates, providing users with clear indicators to verify official package authenticity. This is a helpful security consideration that protects against dependency confusion and typosquatting.
  • Credential Management Best Practices: The skill explicitly recommends against hardcoding credentials and provides patterns for using ManagedIdentityCredential in production and DeveloperToolsCredential for local development. These are established best practices for secure identity management in cloud environments.
  • Configuration Security: The use of environment variables for the AZURE_KEYVAULT_URL ensures that sensitive configuration data is decoupled from the code, facilitating safer secret management and rotation practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:51 PM
Security Audit — agent-trust-hub — azure-keyvault-certificates-rust