Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed paid remote SQL-generation skill; it sends prompts and payment proof data to NEXUS, but that behavior matches its stated purpose.
Install only if you trust NEXUS with the SQL requirements you provide. Do not include production credentials, raw customer data, or confidential schema details unless your organization permits sending them to this external service, and use sandbox or spending controls where possible.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
Or manually copy the SKILL.md to your OpenClaw skills directory:
cp SKILL.md ~/.openclaw/skills/nexus-sql-builder/SKILL.md
The README states the skill is 'automatically invoked' when a matching task is detected, but it does not define trigger boundaries, user-consent requirements, or what data may be sent during invocation. In a skill that calls a remote paid service, ambiguous auto-invocation increases the risk of unintended external data disclosure and unapproved transactions.
The README describes sending query input to a third-party HTTPS endpoint but does not clearly warn users that their prompts or database-related requirements leave the local environment. For a SQL-building skill, inputs may contain sensitive schema details, business logic, or confidential data requirements, making silent remote transmission a meaningful privacy and security risk.
The skill explicitly posts user-provided input to an external service endpoint, which is an external transmission event and therefore a real security concern in agent environments. Although remote API use is part of the advertised functionality, the danger is heightened because the skill processes natural-language requirements that may contain sensitive internal data and may be auto-invoked.
# Step 1: Get the x402/MPP challenge
curl -X POST https://ai-service-hub-15.emergent.host/api/original-services/sql-builder \
-H "Content-Type: application/json" \
-d '{"input": "your query here"}'
# Returns 402 + WWW-Authenticate: Payment header
The skill explicitly instructs the agent to transmit user-provided input and a payment proof environment variable to an external third-party endpoint. Even though this is the stated purpose of the skill, it still creates a real data-exfiltration and secret-disclosure risk because sensitive prompts, schema details, or billing credentials may be sent off-platform to a remote service outside the local trust boundary.
curl -X POST https://ai-service-hub-15.emergent.host/api/original-services/sql-builder \
-H "Content-Type: application/json" \
-H "X-Payment-Proof: $NEXUS_PAYMENT_PROOF" \
-d '{
No suspicious patterns detected.