kamal-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation, configuration templates, and examples for managing production infrastructure using the Kamal deployment tool. All documented practices align with standard industry security standards for VPS management.- [COMMAND_EXECUTION]: Provides numerous CLI examples for
kamal,docker, and Linux system administration (e.g.,ufw,ssh-keygen,systemctl). These commands are essential for the skill's functionality and are presented transparently to the user.- [PRIVILEGE_ESCALATION]: Includes instructions for configuring non-root users withsudoprivileges and hardening SSH configurations. These are defensive security measures intended to reduce the attack surface of the target servers.- [EXTERNAL_DOWNLOADS]: References community Docker images for PostgreSQL backups (e.g.,eeshugerman/postgres-backup-s3) and log aggregation (e.g.,timberio/vector). These are standard external dependencies for modern containerized application stacks.- [CREDENTIALS_UNSAFE]: Mentions the management of sensitive files such as.kamal/secretsand SSH private keys. The documentation explicitly advises against committing these to version control and demonstrates secure methods for injecting secrets via environment variables or secret managers.
Audit Metadata