NEXUS Meeting Notes
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is transparent about sending transcripts to NEXUS, but it includes a paid crypto payment flow that could be invoked without clear per-request approval controls.
Before installing, decide whether you trust NEXUS with your meeting transcripts and payment proof. Use the free sandbox for testing, and configure your agent so any real paid request requires explicit approval or a clear spending limit.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If configured with usable payment capability, repeated or automatic use could incur charges without a clear confirmation step in the skill instructions.
The skill tells the agent how to perform a paid crypto-backed request as part of the normal workflow. The amount is disclosed, but the artifacts do not clearly require per-request user approval, a spending cap, or other guardrails before making payments.
Price: $0.20/request ... Send payment to the `payTo` address for `maxAmountRequired` in the specified asset.
Use the sandbox payment proof for testing, and require explicit user approval or a budget limit before any real paid request is made.
A payment proof may authorize access to paid service usage, so mishandling it could affect billing or access.
The skill requires a payment proof credential and sends it to the NEXUS service as an authentication/payment header. This is expected for the paid service, but it is still payment-related authority.
requires:\n env: [NEXUS_PAYMENT_PROOF] ... - `X-Payment-Proof: <masumi_payment_id>`
Use a dedicated, limited payment proof for this service and avoid reusing credentials that authorize broader payment activity.
Confidential meeting content will leave the local environment and be processed by the external NEXUS service.
The skill clearly discloses that meeting transcript input is transmitted to an external hosted AI service. This is purpose-aligned, but meeting transcripts can contain sensitive business or personal information.
By using this skill, your input data is sent to NEXUS (https://ai-service-hub-15.emergent.host) for AI processing.
Only send transcripts that you are comfortable sharing with NEXUS, and avoid including secrets, credentials, or highly sensitive personal information unless you trust the provider and its retention practices.