kamal-docker-production
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard, well-documented templates for Ruby on Rails deployment using Docker and Kamal 2.
- [SAFE]: The provided Dockerfiles implement security best practices such as multi-stage builds and the creation of a non-root user (
USER rails:rails) to run the application process. - [SAFE]: Secret management guidance follows official Rails and Kamal recommendations, advising the use of environment variable interpolation via Kamal's
env.secretand Rails' encrypted credentials, avoiding hardcoded secrets in the infrastructure code. - [SAFE]: The use of
LD_PRELOADforlibjemalloc.so.2is a recognized performance optimization for Ruby applications and is implemented here in a standard, non-malicious manner. - [SAFE]: Development configurations (
docker-compose.dev.yml) include hardcoded default credentials (e.g.,postgres:postgres), but these are explicitly scoped to local development environments and represent standard industry practice for template configuration.
Audit Metadata