azure-security-keyvault-secrets-java
Fail
Audited by Gen Agent Trust Hub on Feb 14, 2026
Risk Level: HIGHCREDENTIALS_UNSAFE
Full Analysis
- [Data Exposure & Exfiltration] (HIGH): Hardcoded credential patterns found in the Java code examples within
references/acceptance-criteria.md. - Evidence: Section 3.1 includes a hardcoded password string
P@ssw0rd123!. - Evidence: Section 3.2 includes a hardcoded API key
sk_live_abc123xyz. This matches thesk_live_pattern which is a signature for live environment secret keys. Using these in templates increases the risk of credential leakage in generated code.
Recommendations
- AI detected serious security threats
Audit Metadata