azure-keyvault-secrets-rust
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [Package Authenticity Verification]: The skill includes explicit warnings to use only official crates from the authorized 'azure-sdk' user and provides specific indicators for identifying unofficial or potentially malicious packages. This practice helps prevent dependency confusion and typosquatting attacks.- [Secure Authentication Patterns]: It demonstrates the use of developer-specific and managed identity credentials rather than hardcoded secrets. This encourages the use of more secure, identity-based authentication methods supported by the cloud provider.- [Secrets Management Guidance]: The documentation emphasizes best practices like reusing thread-safe clients and avoiding the hardcoding of vault URLs or credentials, which reduces the risk of accidental credential exposure in source code.
Audit Metadata