Aion 2 will run you to a quest marker, fire your next four skills off one key, pick your target and drink your own potions. It won't fight for you. There's no auto-battle on global and none on Korean PC either, so if you came looking for a hunt-while-you-sleep button, it isn't there.
What is there is enough to make a grind session a lot less tedious, and that's worth setting up before anyone sells you something riskier.
What the client does without you
Community guides put the built-in automation at five things: auto-move to a quest objective, a skill queue, a skill macro that chains up to four skills on one hotkey and repeats up to twenty times, an auto-target setting in the combat options, and auto-use for potions and scrolls. Menu names move between builds, so check yours rather than mine.
The auto-move is what starts the rumour. It walks your character across a zone unattended, which looks like the start of an auto-hunt right up to the point where something attacks you.
The stationary grind is as close as it gets
Put the macro on a dense respawn, turn auto-target on, and you have a rotation that fires without you choosing each button. People farm like this for hours.
You are still at the keyboard. That's the whole distinction the rest of this post is about, and it's the one NC has written down.
One sentence decides whether a tool is bannable
NC's sanctions table puts Use of Unauthorized Programs at an Integrated Account Ban on a first offence, which restricts every NC game rather than just this one.
Use of Unauthorized Programs: "Using computer programs, devices, or equipment that circumvent technical protection measures" or "interfere with normal operations (e.g., programs enabling actions impossible for regular users)."
Creating/Distributing Unauthorized Programs: "(1) Creating or distributing unauthorized programs, devices, or equipment" and "(2) Modifying or tampering with client or server programs."
Gold Farming / Bot Operations: "(2) Using unauthorized programs or gambling via multiple accounts to unfairly obtain, transfer, or monetize items" and "(3) Other abnormal activity detected by internal systems."
Those triggers describe four things: circumventing a protection measure, interfering with normal operations, enabling something a regular user cannot do, and tampering with the client.
A clicker or a bot hits every one of them. It plays while you're absent, which is the definition of an action impossible for a regular user, and most of them reach into the client to do it. There's no ambiguity to argue over.
A read-only damage meter is a different shape of thing, and the policy never mentions packet capture at all. It shows you numbers; it doesn't let you do anything you couldn't do by watching. That isn't permission, though. It's silence, and the penalty if NC reads it the other way is the maximum one on the table.
Korea is restricting accounts in batches
The enforcement is not theoretical. Korean notices cite this same sanctions table with reason lines naming Gold Farming / Bot Operations, Use of Unauthorized Programs and real-money trading. Playnews counted 24,374 restrictions in twelve days, with some later reinstated.
If you are caught, appeals run on a 15-day clock from the date of the sanction. Worth knowing the difference between a sanction and a security lock, too: a lock happens when a login looks risky and isn't a penalty.
The verdict
Set up the macro. It's free, it's in the options menu, and it covers most of what people install bots for.
Don't install the bot. One account, every NC game, first offence, and Korea is working through them in batches.
And treat any tool that answers "can I get banned for this?" with a flat "no" as a tool that doesn't know. One popular Aion 2 meter's FAQ says exactly that. Nobody outside NC can make that promise, and NC hasn't.
Policy wording is from NC's own Operation Policy page, read on 21 October; the automation list is from community guides and worth confirming in your own client.