kamal-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The generated
deploy.ymlconfiguration specifies Docker images and a registry username (jalen0x) that are external to the skill authormajiayu000. - [COMMAND_EXECUTION]: The skill uses the
kamalCLI tool to perform deployment operations, which involves executing administrative commands on remote servers. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to generate deployment configurations without explicit validation, creating a potential surface for configuration injection.
- Ingestion points: Workflow variables including Domain and Server IP.
- Boundary markers: No boundary markers or warnings are used to delimit user data within the generated configuration.
- Capability inventory: Remote server management and container deployment through
kamal. - Sanitization: No sanitization or validation logic is defined for the user-supplied input strings.
Audit Metadata