azure-keyvault-certificates-rust
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
azure_security_keyvault_certificatesandazure_identitycrates viacargo add. These are official Azure SDK packages maintained by Microsoft and hosted on the legitimate crates.io registry. - [INDIRECT_PROMPT_INJECTION]: The skill implements operations that retrieve certificate data and policies from Azure Key Vault, creating a surface for potential indirect prompt injection if certificate content is manipulated by an attacker.
- Ingestion points: The
get_certificate,list_certificate_properties, andget_certificate_policyfunctions inSKILL.mdretrieve data from the external Azure Key Vault service. - Boundary markers: There are no explicit delimiters or specific instructions provided to the agent to ignore or isolate the content retrieved from the Key Vault API.
- Capability inventory: The skill performs network operations to interact with Azure services and can output retrieved data to the console.
- Sanitization: No sanitization or validation of the retrieved certificate metadata or policy strings is demonstrated in the code sketches.
Audit Metadata