nimbu-cloud-code
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and markdown reference files from the official vendor domain at
docs.nimbu.io. This is a trusted source used to ensure code accuracy. - [SAFE]: The skill demonstrates the correct use of the platform's environment variable system (
Nimbu.Site.env.get) for managing sensitive configuration like API keys, which is a secure practice compared to hardcoding secrets. - [SAFE]: The skill describes a fixed sandbox environment with a predefined set of available modules (e.g., lodash, moment, http). It explicitly warns that adding packages to
package.jsondoes not affect the runtime, preventing common supply chain or dependency injection risks. - [SAFE]: All referenced developer tools and packages for testing (e.g.,
@nimbu/testing,jest) are standard utilities and are appropriately scoped to development environments.
Audit Metadata