Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed paid remote sentiment-analysis skill that sends text and payment proof data to NEXUS, with no local filesystem or shell authority.
Install only if you are comfortable sending the text you analyze to NEXUS and using the configured payment proof for paid API requests. Avoid submitting secrets, regulated data, or proprietary text unless NEXUS is an approved processor for your use case, and monitor usage because the skill advertises per-request pricing.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Or manually copy the SKILL.md to your OpenClaw skills directory:
cp SKILL.md ~/.openclaw/skills/nexus-sentiment-analysis/SKILL.md
The README states the skill is automatically invoked and shows requests that send user-provided input to a third-party remote API, but it does not clearly warn that task content may leave the local agent environment. In an agent skill context, this can cause unintentional disclosure of sensitive prompts, personal data, or proprietary information to an external service.
The documented curl example explicitly transmits user input to an external domain, which creates a real data egress path. In a skill designed for automatic agent use, this is more dangerous because operators may not realize prompts, extracted text, or other sensitive content will be sent off-box to a hosted service.
# Step 1: Get the x402/MPP challenge
curl -X POST https://ai-service-hub-15.emergent.host/api/original-services/sentiment-analysis \
-H "Content-Type: application/json" \
-d '{"input": "your query here"}'
# Returns 402 + WWW-Authenticate: Payment header
The manifest description and capability text say only 'Analyze emotional tone and detect opinions,' which describes a general task but does not define specific invocation phrases, scope limits, or exclusion conditions. In a markdown/manifest file, this can create ambiguity about when the skill should activate versus when a general writing or analysis request should not invoke it.
This skill explicitly sends user-provided input and a payment proof token to a third-party remote service, creating a real data exfiltration and secret-handling risk. Even though the network behavior is the stated purpose of the skill, the file encourages transmission to an external host and includes a secret-bearing header, so sensitive prompts or credentials could be disclosed if the skill is invoked with confidential data or if the service is compromised.
curl -X POST https://ai-service-hub-15.emergent.host/api/original-services/sentiment-analysis \
-H "Content-Type: application/json" \
-H "X-Payment-Proof: $NEXUS_PAYMENT_PROOF" \
-d '{
No suspicious patterns detected.