NEXUS Email Compose

Draft professional communications

This skill appears to be a thin wrapper for a paid remote service and is instruction-only (no code installed). The main red flag is that it requires a global NEXUS_PAYMENT_PROOF environment variable even though the docs describe sandbox and on-the-fly payment flows—storing a payment proof as a permanent env var increases the chance of leaking a sensitive credential. Before installing: (1) verify the service operator (ai-service-hub-15.emergent.host) and review their external documentation; (2) do not set a permanent NEXUS_PAYMENT_PROOF in your global environment—prefer passing sandbox_test or per-request credentials; (3) test with the sandbox option first and monitor network traffic; (4) if you must provide payment credentials, scope them tightly (use short-lived credentials or agent-scoped config) and avoid placing secrets in global shell profiles; (5) consider whether you trust an unknown third party to see the content of messages you send to the service. If the publisher cannot explain why a required env var is necessary for all installs, treat the skill with caution.

Type: OpenClaw Skill Name: nexus-email-compose Version: 1.1.0 The nexus-email-compose skill is a legitimate-appearing interface for a paid AI drafting service hosted at ai-service-hub-15.emergent.host. It requires only network permissions to interact with its API and uses a specific environment variable (NEXUS_PAYMENT_PROOF) for transaction verification via Cardano or Stellar blockchains. The skill contains no evidence of data exfiltration, unauthorized file access, or malicious execution logic.