kamal-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The generated deploy.yml configuration specifies Docker images and a registry username (jalen0x) that are external to the skill author majiayu000.
  • [COMMAND_EXECUTION]: The skill uses the kamal CLI tool to perform deployment operations, which involves executing administrative commands on remote servers.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to generate deployment configurations without explicit validation, creating a potential surface for configuration injection.
  • Ingestion points: Workflow variables including Domain and Server IP.
  • Boundary markers: No boundary markers or warnings are used to delimit user data within the generated configuration.
  • Capability inventory: Remote server management and container deployment through kamal.
  • Sanitization: No sanitization or validation logic is defined for the user-supplied input strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 12:46 AM