nextcloud

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of the occ CLI tool for administrative tasks such as system status checks, upgrades, and user management. These commands are standard for Nextcloud administration and are correctly instructed to run under the non-privileged www-data user.
  • [EXTERNAL_DOWNLOADS]: The provided docker-compose.yml reference specifies official Docker images for Nextcloud, MariaDB, Redis, and Nginx. These images are sourced from well-known, trusted organizations on Docker Hub.
  • [CREDENTIALS_UNSAFE]: Secret management in the docker-compose.yml file is handled via environment variable placeholders (e.g., ${MYSQL_PASSWORD}) rather than hardcoded strings, which is a recommended security practice for configuration templates.
  • [SAFE]: All external documentation links in references/docs.md point to the official nextcloud.com domain or verified official GitHub repositories (github.com/nextcloud).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 01:36 PM