azure-keyvault-keys-rust
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Package Integrity Guidance: The instructions emphasize using official crates from the established 'azure-sdk' user on crates.io and provide a specific warning against unofficial versions or potential typosquats. This helps protect against supply chain risks.
- Authentication Best Practices: The skill correctly identifies that 'DefaultAzureCredential' is not available in the Rust SDK and recommends environment-specific credentials like 'DeveloperToolsCredential' or 'ManagedIdentityCredential' to avoid hardcoding sensitive information.
- Cryptographic Security: The provided examples demonstrate server-side operations (envelope encryption) where private keys remain within the Hardware Security Module (HSM), minimizing exposure of sensitive cryptographic material to the application logic.
- Credential Management: It explicitly advises using environment variables for the Key Vault URL and reinforces the practice of not hardcoding authentication secrets.
Audit Metadata