nuon-actions
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill functions as a template generator for Nuon action scripts, authored by 'nuonco'. All external links point to the official documentation at docs.nuon.co.
- [COMMAND_EXECUTION]: The generated templates include shell scripts that utilize
kubectlfor cluster management tasks like health checks and database migrations. This is the intended primary purpose of the skill. - [DATA_EXPOSURE]: The skill provides patterns for managing Kubernetes secrets, advising the use of platform-specific template variables for sensitive data handling.
- [PROMPT_INJECTION]: The skill provides a surface for indirect injection (Category 8) by interpolating user-provided variables into shell scripts. Ingestion points: User-defined placeholders and
{{ .nuon.inputs.inputs.<name> }}in SKILL.md. Boundary markers: None. Capability inventory:kubectlaccess. Sanitization: Not specified.
Audit Metadata