azure-storage-blob-rust
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Verified Dependency Usage: The skill explicitly guides users to use official crates from the
azure-sdkaccount on crates.io and provides a warning against unofficial or potentially typosquatted community versions, which is a significant proactive measure against supply chain risks. - Secure Authentication Implementation: The documentation correctly advises against hardcoding credentials, instead promoting the use of
DeveloperToolsCredentialfor local development andManagedIdentityCredentialfor production environments, ensuring adherence to modern secret management standards. - Least Privilege Promotion: By including a reference for Azure RBAC roles (e.g., 'Storage Blob Data Reader', 'Contributor'), the skill facilitates the implementation of the principle of least privilege when configuring cloud access.
- Indirect Prompt Injection Surface: This skill involves downloading data from external storage via
blob_client.download. While this is the intended primary purpose, it creates a potential ingestion point for untrusted data. - Ingestion points:
blob_client.downloadcall inSKILL.md. - Boundary markers: None specified for the handling of downloaded blob content.
- Capability inventory: Network operations (Azure Storage API), data manipulation in memory.
- Sanitization: No explicit sanitization or validation of the downloaded blob content is mentioned. Developers should ensure that data retrieved from storage is properly validated before being processed in sensitive contexts.
Audit Metadata