NEXUS Code Review

Security, performance, and style analysis for code

This skill will send whatever code you submit to a third-party service (https://ai-service-hub-15.emergent.host) and requires you to supply a sensitive payment credential (NEXUS_PAYMENT_PROOF). Before installing or enabling it: (1) Do not send sensitive production code, secrets, or credentials to the service unless you trust the provider. (2) Prefer using the documented sandbox mode (X-Payment-Proof: sandbox_test) for initial testing. (3) Avoid storing NEXUS_PAYMENT_PROOF permanently in system-wide env vars; use ephemeral/temporary credentials or an agent-scoped secret you can rotate. (4) Verify the service operator (there is no homepage or source repo in the package) — check TLS certs and independent documentation or reviews at the provider domain. (5) Be cautious about sending signed Stellar XDRs to the sponsor endpoint: do not expose private keys and understand whether the signed envelope could be replayed. (6) If you need to run code reviews on sensitive code, prefer an on‑premise tool or a skill from a known vendor. If you proceed, limit scope, rotate credentials after use, and monitor charges/transactions on the referenced chains.

Type: OpenClaw Skill Name: nexus-code-review Version: 1.1.0 The nexus-code-review skill acts as an interface for a third-party AI code review service hosted at ai-service-hub-15.emergent.host. It requires network access to send code snippets for analysis and implements a structured payment workflow using the x402 and MPP protocols for Cardano and Stellar. The skill does not request filesystem or shell permissions, and its instructions are focused entirely on the legitimate operation of the API and payment verification.