NEXUS Email Compose
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is transparent about using a paid NEXUS email-drafting API, but its workflow can initiate cryptocurrency/payment actions without clear per-use approval or budget limits.
Install only if you are comfortable sending message content to NEXUS and you can enforce explicit approval or budget limits for paid requests. Use the sandbox option for testing and protect the NEXUS_PAYMENT_PROOF value like a credential.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill could incur charges or cryptocurrency payments when the agent drafts messages, especially if it is invoked automatically for matching tasks.
The normal workflow tells the agent to make a paid payment transaction, but the artifacts do not define a required user approval step, budget cap, or confirmation before sending payment.
Price: $0.10/request ... Select a `paymentRequirement` ... Send payment to the `payTo` address for `maxAmountRequired`
Only use this with explicit payment approval controls, a sandbox payment proof when testing, and a clear spending limit before allowing the agent to execute payment steps.
Anyone or any agent with access to the payment proof may be able to use the paid NEXUS service under that proof.
The skill requires a payment proof credential to access the paid service. This is expected for the service, but it grants usage/payment authority and should be protected.
requires: env: [NEXUS_PAYMENT_PROOF] ... `X-Payment-Proof: <masumi_payment_id>`
Store the payment proof securely, prefer limited-use or sandbox credentials where possible, and avoid exposing it to unrelated skills or logs.
Emails, drafts, or business communication details you provide may be processed by the NEXUS-hosted service.
The skill clearly discloses that message content is sent to an external AI service. This is purpose-aligned, but users should notice the data leaves their local agent.
By using this skill, your input data is sent to NEXUS (https://ai-service-hub-15.emergent.host) for AI processing.
Do not send confidential or regulated content unless you trust NEXUS and its retention/security promises; consider redacting sensitive details.