kamal-deployment

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation, configuration templates, and examples for managing production infrastructure using the Kamal deployment tool. All documented practices align with standard industry security standards for VPS management.- [COMMAND_EXECUTION]: Provides numerous CLI examples for kamal, docker, and Linux system administration (e.g., ufw, ssh-keygen, systemctl). These commands are essential for the skill's functionality and are presented transparently to the user.- [PRIVILEGE_ESCALATION]: Includes instructions for configuring non-root users with sudo privileges and hardening SSH configurations. These are defensive security measures intended to reduce the attack surface of the target servers.- [EXTERNAL_DOWNLOADS]: References community Docker images for PostgreSQL backups (e.g., eeshugerman/postgres-backup-s3) and log aggregation (e.g., timberio/vector). These are standard external dependencies for modern containerized application stacks.- [CREDENTIALS_UNSAFE]: Mentions the management of sensitive files such as .kamal/secrets and SSH private keys. The documentation explicitly advises against committing these to version control and demonstrates secure methods for injecting secrets via environment variables or secret managers.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 10:08 PM