registry
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for AWS ECR integration that involve using Ruby ERB syntax (
<%= %x(...) %>) within theconfig/deploy.ymlfile to execute theaws ecr get-login-passwordcommand. This is the standard, documented procedure for the Kamal tool to handle short-lived AWS credentials. - [SAFE]: The skill promotes secure credential management by directing the agent and user to store sensitive registry passwords in the
.kamal/secretsfile, ensuring they are not hardcoded in project configuration files. - [SAFE]: All external resource references point to official documentation and configuration pages for well-known services (Docker Hub, Google Cloud Platform, AWS), with no evidence of typosquatting or malicious redirection.
Audit Metadata