← Back to Skills Marketplace
karimsherifyehia

Nexus — Ops OS for AI Agents

by karimsherifyehia · GitHub ↗ · v1.0.5 · MIT-0
cross-platform ⚠ suspicious
182
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install nexus
Description
Interact with Nexus, a multi-tenant Ops OS for ecommerce and retail businesses. Requires a NEXUS_API_KEY environment variable (agent API key with prefix nxs_...
Usage Guidance
Do not install or enable this skill until you verify its provenance and correct the metadata mismatch. Specific actions to take before proceeding: - Verify origin: ask the publisher for an authoritative homepage or repository and confirm the owner matches Nexus (the SKILL.md lists nexus-docs.aiforstartups.io but the package registry shows unknown source). - Confirm registry metadata: ensure the skill entry declares NEXUS_API_KEY as a required env and that disable-model-invocation is set to true if you require manual approval for writes. The current package metadata contradicts the embedded SKILL.md. - Only supply an agent API key (nxs_ak_...) created by an org admin; never supply a human JWT. Treat any anon PostgREST key as sensitive and avoid embedding it in shared runtimes. - If you must test, run the skill in a tightly-scoped environment with limited org scope and audit logs enabled, and do not provide write-scoped keys until you are satisfied with behavior. - Ask the vendor for signed packaging or a canonical registry entry (and for source code) so you can confirm there are no hidden behaviors. These inconsistencies suggest packaging or governance issues rather than obvious malice, but they should be resolved before trust is granted.
Capability Analysis
Type: OpenClaw Skill Name: nexus Version: 1.0.5 The Nexus Agent skill is a legitimate integration for the Nexus operations platform, providing tools for CRM, order management, and messaging. It includes strong safety guidelines for the AI agent, such as restricting network calls to trusted domains (api.nexus.aiforstartups.io), enforcing a 'read-first' policy, and requiring explicit user confirmation for write operations. No indicators of malicious intent or data exfiltration were found in SKILL.md or api-reference.md.
Capability Assessment
ℹ Purpose & Capability
SKILL.md and api-reference clearly define a Nexus agent that uses a single agent API key (NEXUS_API_KEY) and may optionally use an anon key for direct PostgREST access; those credentials are coherent with the stated purpose. However, the registry metadata provided with the skill (requirements/primary credential) does NOT list the required NEXUS_API_KEY or primary credential — a clear packaging/metadata mismatch that is unexpected and unexplained.
ℹ Instruction Scope
The runtime instructions are focused and verbosely constrain behavior: read-first by default, explicit confirmation required for writes, limited trusted domains (api.nexus.aiforstartups.io and nexus-docs.aiforstartups.io), and an exchange flow for agent JWTs. The api-reference contains direct PostgREST endpoints and exact DB column names, which is powerful but expected for an ops agent; it also increases the chance of accidental writes if confirmations are not enforced. Overall instructions are scoped to the product, but they permit low-level direct DB access (via anon key or JWT) which is sensitive.
✓ Install Mechanism
This is instruction-only with no install spec and no code files, so nothing is downloaded or written by an installer. That reduces risk from arbitrary installs.
⚠ Credentials
The skill legitimately needs one primary secret (NEXUS_API_KEY) and optionally an anon PostgREST key for direct DB reads; that is proportionate. However, the registry metadata omitted these env declarations while SKILL.md declares them (metadata mismatch). Additionally, the presence of guidance about anon keys highlights the risk: anon keys and agent API keys must be treated as sensitive and only supplied by trusted runtimes. The skill's requests for sensitive keys are justified by purpose but demand careful runtime governance.
⚠ Persistence & Privilege
The SKILL.md intends the skill to be user-invocable only and explicitly sets disable-model-invocation (do not allow autonomous invocation) in its header metadata. The registry metadata earlier provided with the package shows default flags (disable-model-invocation: false), creating a mismatch that could allow autonomous agent invocation when the author intended to prohibit it. The skill is not flagged always:true, which is good, but the contradictory invocation flags are an important risk to resolve before installation.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install nexus
  3. After installation, invoke the skill by name or use /nexus
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
- Skill renamed to "nexus-agent" and description updated for clarity about agent authentication and supported operations. - Now user-invocable only; disables autonomous or background actions by the AI, with a strong "read-first, write-gated" execution policy. - All write operations (e.g., creating orders, updating contacts, sending messages) require explicit user confirmation. - Updated and detailed credential handling: only reads the NEXUS_API_KEY environment variable, never human JWTs or unrelated secrets. - Expanded policy and documentation for authentication, direct API, and MCP integration. - New safety guidance: limits host calls to trusted Nexus domains only.
v1.0.4
- Added homepage and source URLs to metadata for easier discovery and reference. - Updated environment variable declaration style from `credentials:` to `env:` for consistency. - No changes to core functionality or API usage.
v1.0.3
- Added explicit credentials section detailing the required NEXUS_API_KEY variable. - Clarified that API key must have prefix nxs_ak_, obtained via self-registration, and stored as an environment variable. - No changes to functionality or APIs—documentation and metadata update only.
v1.0.2
- Simplified setup: Skill now requires the NEXUS_API_KEY environment variable, set by the user after self-registration. - Clarified credential handling: No more reading from files; instead, prompt user for their API key if missing. - Improved documentation: Instructions now focus on essential authentication steps and agent registration flow. - Expanded triggers: Added support for queries about social media posts and content calendars. - Reformatted tool descriptions and plan tiers for greater clarity and easier reading.
v1.0.1
**Changelog for nexus v1.0.1** - Switched API base URL to https://api.nexus.aiforstartups.io/functions/v1 (no longer uses Supabase direct URL). - Added self-registration flow for agents with `agent-register`. - Credentials are now stored in `.nexus-credentials` and obtained via registration endpoint if missing. - Updated authentication: only agent API key and JWT are required; Supabase anon key is deprecated. - Expanded documentation on available MCP tools, including new social media and content calendar tools. - Clarified plan limits, scopes, and integration guidelines.
v1.0.0
Nexus Agent Skill v1.0.0 - Initial release. - Provides AI agent integration for Nexus multi-tenant Ops OS. - Supports agent authentication via API key exchange, CRM contact management, omnichannel messaging, order/inventory/warehouse operations, shipping, VoIP, and analytics. - Outlines preferred integration path (MCP server), with direct API fallback. - Documents available API endpoints, scopes, workflows, and core operations.
Metadata
Slug nexus
Version 1.0.5
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 6
Frequently Asked Questions

What is Nexus — Ops OS for AI Agents?

Interact with Nexus, a multi-tenant Ops OS for ecommerce and retail businesses. Requires a NEXUS_API_KEY environment variable (agent API key with prefix nxs_... It is an AI Agent Skill for Claude Code / OpenClaw, with 182 downloads so far.

How do I install Nexus — Ops OS for AI Agents?

Run "/install nexus" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Nexus — Ops OS for AI Agents free?

Yes, Nexus — Ops OS for AI Agents is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Nexus — Ops OS for AI Agents support?

Nexus — Ops OS for AI Agents is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Nexus — Ops OS for AI Agents?

It is built and maintained by karimsherifyehia (@karimsherifyehia); the current version is v1.0.5.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments