azure-security-keyvault-keys-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [Authentication Best Practices]: The skill correctly demonstrates the use of DefaultAzureCredential from the azure-identity library. This approach allows for secure, flexible authentication without hardcoding credentials, leveraging environment variables or managed identities as appropriate for the environment.
- [Trusted Dependencies]: The skill references official Microsoft Azure SDK packages (com.azure:azure-security-keyvault-keys). These are well-known, trusted libraries for interacting with Azure services.
- [Secure Cryptographic Standards]: The instructions recommend the use of Hardware Security Modules (HSM) for production keys and suggest using modern, secure algorithms like RSA-OAEP for encryption and SHA-256 for signing.
- [Controlled Resource Access]: Network communication is scoped to the official Azure Key Vault service domain (vault.azure.net). File system interactions, such as writing backup blobs, are performed within the context of the skill's documented functionality for key backup and restoration.
Audit Metadata