Skills azure-keyvault-secrets-rust
๐Ÿ“ฆ

azure-keyvault-secrets-rust

Content revision r2 High Risk โš™๏ธ External commands๐ŸŒ Network access

Manage Azure Key Vault Secrets with Rust

Rust developers need reliable patterns for accessing Azure Key Vault secrets. This skill provides focused SDK examples for authentication, retrieval, updates, listing, version access, and deletion.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "azure-keyvault-secrets-rust" from https://skillstore.io/skills/sickn33-azure-keyvault-secrets-rust.md and its manifest at https://skillstore.io/api/skills/sickn33-azure-keyvault-secrets-rust/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "azure-keyvault-secrets-rust". How should my local Rust service authenticate to the vault?

Expected outcome:

  • Use DeveloperToolsCredential for local development.
  • Provide your own Azure Key Vault endpoint through configuration.
  • Grant the developer identity only the required secret permissions.

Using "azure-keyvault-secrets-rust". What should a safe secret retrieval result include?

Expected outcome:

Confirm that retrieval succeeded and pass the value directly to its consumer. Do not display the secret in logs, errors, or terminal output.

Using "azure-keyvault-secrets-rust". Which role should a read-only service receive?

Expected outcome:

Use Key Vault Secrets User for get and list access. Reserve Key Vault Secrets Officer for workflows that require full secret management.

Security Audit

High Risk
v5 โ€ข 7/23/2026 Open versioned report

The 22 command findings are Markdown fences or inline code formatting, while five URL findings are placeholder Azure endpoints or reference links. One high-severity issue remains: the retrieval example prints a secret value to standard output, which can expose credentials through logs.

1
Files scanned
151
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

High
Secret Value Printed to Standard Output
The get-secret example prints the retrieved secret value, which can expose credentials in terminals, CI logs, telemetry, or retained application logs.
Line 49 directly formats secret.value in a println statement. The documented behavior clearly discloses sensitive material to standard output.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-azure-keyvault-secrets-rust/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-azure-keyvault-secrets-rust/security.svg)](https://skillstore.io/skills/sickn33-azure-keyvault-secrets-rust?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-azure-keyvault-secrets-rust?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-azure-keyvault-secrets-rust/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-azure-keyvault-secrets-rust.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

sickn33. (2026). azure-keyvault-secrets-rust security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-azure-keyvault-secrets-rust/audits/5

BibTeX citation

@techreport{sickn33-sickn33-azure-keyvault-secrets-rust-2026, author = {sickn33}, title = {azure-keyvault-secrets-rust security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-azure-keyvault-secrets-rust/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "azure-keyvault-secrets-rust security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-23" url: "https://skillstore.io/skills/sickn33-azure-keyvault-secrets-rust/audits/5" identifiers: - type: other value: "skillstore:sickn33-azure-keyvault-secrets-rust:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Integrate Secrets into a Rust Service

Add authenticated secret retrieval and updates to an asynchronous Rust application.

Prepare Production Authentication

Plan local credentials, managed identity, and least-privilege Key Vault roles for deployment.

Review Secret Access Behavior

Assess version access, deletion, listing, and output handling before approving a service integration.

Try These Prompts

Add the Rust Dependencies
Show how to add Azure Key Vault Secrets and Azure Identity dependencies to a Rust project. Include the required vault URL environment variable.
Retrieve a Secret Safely
Create a Rust example that authenticates with DeveloperToolsCredential and retrieves {secret_name} from {vault_url}. Never print or log the secret value.
Manage Secret Metadata
Write an asynchronous Rust workflow that sets {secret_name}, updates its content type and tags, then lists secret names. Explain the required RBAC role.
Design Production Secret Access
Design production Rust secret access for {application}. Use managed identity, least-privilege RBAC, version selection, redacted errors, and soft-delete considerations.

Best Practices

  • Use developer credentials locally and managed identity for production workloads.
  • Assign the narrowest Key Vault role that supports the required operations.
  • Keep secret values out of source code, logs, error messages, and command output.

Avoid

  • Do not print retrieved secret values or include them in diagnostic messages.
  • Do not grant Key Vault Secrets Officer when the application only reads secrets.
  • Do not use developer credentials in production or commit credential material.

Frequently Asked Questions

Which secret operations does this skill cover?
It covers get, set, property updates, delete, list, and retrieval of a specific version.
How does local authentication work?
The example uses DeveloperToolsCredential, which can use supported developer sign-in sources in the Azure Identity library.
What authentication should production use?
Use ManagedIdentityCredential when the Azure hosting environment provides a managed identity.
Which RBAC roles are described?
Key Vault Secrets User supports get and list. Key Vault Secrets Officer supports full secret management.
Does the skill configure Azure resources?
No. You must configure the vault, networking, identity, and role assignments separately.
Is the retrieval example production safe?
No. Remove the statement that prints the secret value and use redacted success reporting.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526

Maintenance freshness

7/26/2026

Usage

6 downloads ยท 91 views

File structure

๐Ÿ“„ SKILL.md