deployment-gotchas
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides constructive guidance on Elixir deployment best practices.
- [CREDENTIALS_UNSAFE]: The skill explicitly instructs against hardcoding secrets, recommending the use of environment variables and
System.get_env!/1which is a secure standard for secret management. - [COMMAND_EXECUTION]: Shell commands and Elixir release commands provided are standard administrative operations (e.g., running migrations, building assets, starting the application) necessary for the stated purpose of the skill.
- [EXTERNAL_DOWNLOADS]: The Dockerfile uses official Elixir and Alpine base images from Docker Hub, which are well-known and trusted sources for build environments.
Audit Metadata