azure-keyvault-certificates-rust

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the azure_security_keyvault_certificates and azure_identity crates via cargo add. These are official Azure SDK packages maintained by Microsoft and hosted on the legitimate crates.io registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements operations that retrieve certificate data and policies from Azure Key Vault, creating a surface for potential indirect prompt injection if certificate content is manipulated by an attacker.
  • Ingestion points: The get_certificate, list_certificate_properties, and get_certificate_policy functions in SKILL.md retrieve data from the external Azure Key Vault service.
  • Boundary markers: There are no explicit delimiters or specific instructions provided to the agent to ignore or isolate the content retrieved from the Key Vault API.
  • Capability inventory: The skill performs network operations to interact with Azure services and can output retrieved data to the console.
  • Sanitization: No sanitization or validation of the retrieved certificate metadata or policy strings is demonstrated in the code sketches.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 04:21 PM