Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

NEXUS Log Analyzer

v1.1.0

Parse and analyze application logs for patterns

0· 293·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for cyberforexblockchain/nexus-log-analyzer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "NEXUS Log Analyzer" (cyberforexblockchain/nexus-log-analyzer) from ClawHub.
Skill page: https://clawhub.ai/cyberforexblockchain/nexus-log-analyzer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: NEXUS_PAYMENT_PROOF
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install nexus-log-analyzer

ClawHub CLI

Package manager switcher

npx clawhub@latest install nexus-log-analyzer
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The declared purpose (log parsing/analysis) is consistent with the runtime instructions, which call a remote AI endpoint to perform analysis. However, the skill has no homepage/source and is purely a network-forwarding wrapper rather than a local analyzer; that may surprise users who expect on-device processing.
Instruction Scope
SKILL.md explicitly instructs the agent to POST input to https://ai-service-hub-15.emergent.host and to follow payment flows (x402 / MPP / legacy X-Payment-Proof). It does not request filesystem or shell access, and it warns that inputs are sent to the vendor. This is within the stated purpose but means potentially sensitive logs will be transmitted off-host.
Install Mechanism
No install spec or code is provided (instruction-only), so nothing is written to disk by an installer. This is low installer risk.
!
Credentials
The skill requires a single environment variable NEXUS_PAYMENT_PROOF (primary credential) for payments. Requiring a persistent payment proof as a mandatory env var is sensitive and not strictly necessary given the documented sandbox option and alternative header-based flows; the skill forces storage of a payment credential without explaining lifecycle, scope, or how to obtain it from a trusted source.
Persistence & Privilege
always is false and the skill does not request elevated privileges or to modify other skills. Autonomous invocation is allowed (default) but not excessive here by itself.
What to consider before installing
This skill forwards your input logs to an external paid service (ai-service-hub-15.emergent.host). Before installing: 1) Confirm you trust the NEXUS host and its privacy/policy (there is no homepage/source provided in the package). 2) Avoid storing long-lived payment proofs in a broad environment variable — prefer per-request headers or scoped secrets, and treat NEXUS_PAYMENT_PROOF like a high-sensitivity secret. 3) Test with the documented sandbox (X-Payment-Proof: sandbox_test) first. 4) If your logs contain sensitive PII or credentials, consider local/offline log analysis tools instead of sending them to a remote service. 5) If you proceed, limit where the credential is stored, monitor payments and rotate credentials, and review network traffic to ensure only the documented endpoint is contacted.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Clawdis
EnvNEXUS_PAYMENT_PROOF
Primary envNEXUS_PAYMENT_PROOF
aivk976v39d4paxv7097n1nhkb5cs84gmyccardanovk976v39d4paxv7097n1nhkb5cs84gmyclatestvk976v39d4paxv7097n1nhkb5cs84gmycstellarvk976v39d4paxv7097n1nhkb5cs84gmycx402vk976v39d4paxv7097n1nhkb5cs84gmyc
293downloads
0stars
2versions
Updated 10h ago
v1.1.0
MIT-0

Log Analyzer

NEXUS Agent-as-a-Service on Cardano + Stellar | Price: $0.25/request | Accepts: ADA, DJED, iUSD, USDCx, USDM (Cardano) + USDC, XLM (Stellar)

When to use

Use when you need to parse and analyze application logs for patterns.

Steps

Option A: x402 Standard (Recommended)

  1. Call the service endpoint without payment headers.
  2. Receive HTTP 402 with WWW-Authenticate: Payment header AND x402 accepts[] array in response body.
  3. Select a paymentRequirement from accepts[] matching your preferred network + asset.
  4. Networks: cardano:mainnet (ADA, DJED, iUSD, USDCx, USDM), stellar:pubnet (USDC, XLM), sandbox (free).
  5. Send payment to the payTo address for maxAmountRequired in the specified asset.
  6. Stellar fee sponsorship: POST your signed XDR to https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor — NEXUS pays gas, you need 0 XLM.
  7. Retry with X-PAYMENT: <base64url JSON {x402Version:1, scheme:"exact", network, payload:{tx_hash, currency}}> header.
  8. Parse the JSON response and X-PAYMENT-RESPONSE header.

Option B: MPP Standard

  1. Call the service endpoint without payment headers.
  2. Receive HTTP 402 with WWW-Authenticate: Payment header listing all accepted currencies and amounts.
  3. Pick your preferred chain + currency: Cardano (ADA, stablecoins) or Stellar (USDC, XLM).
  4. Create payment: Masumi escrow (Cardano) or direct Stellar transfer.
  5. Stellar fee sponsorship: POST your signed XDR to https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor — NEXUS pays gas, you need 0 XLM.
  6. Retry with Authorization: Payment <base64url-credential> header.
  7. Parse the JSON response and Payment-Receipt header.

Option C: Legacy Header

  1. Send a POST request to the NEXUS API endpoint with your input.
  2. Include the X-Payment-Proof header (Masumi payment ID or sandbox_test for testing).
  3. Parse the JSON response and return the result.

API Call

curl -X POST https://ai-service-hub-15.emergent.host/api/original-services/log-analyzer \
  -H "Content-Type: application/json" \
  -H "X-Payment-Proof: $NEXUS_PAYMENT_PROOF" \
  -d '{
  "input": "Example input for Log Analyzer"
}'

Endpoint: https://ai-service-hub-15.emergent.host/api/original-services/log-analyzer Method: POST Headers:

  • Content-Type: application/json
  • X-PAYMENT: <base64url JSON> (x402 standard — recommended)
  • Authorization: Payment <credential> (MPP standard)
  • X-Payment-Proof: <masumi_payment_id> (legacy — use sandbox_test for free testing)

Accepted Currencies: ADA, DJED, iUSD, USDCx, USDM (Cardano) | USDC, XLM (Stellar) x402 Discovery: GET https://ai-service-hub-15.emergent.host/api/mpp/x402 (all services in native x402 format) MPP Discovery: GET https://ai-service-hub-15.emergent.host/api/mpp/discover Stablecoin Registry: GET https://ai-service-hub-15.emergent.host/api/mpp/stablecoins (includes on-chain policy IDs) Stellar Info: GET https://ai-service-hub-15.emergent.host/api/mpp/stellar (assets, recipient, fee sponsorship) Fee Sponsorship: POST https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor (NEXUS pays Stellar gas — agents need 0 XLM)

External Endpoints

URLMethodData Sent
https://ai-service-hub-15.emergent.host/api/original-services/log-analyzerPOSTInput parameters as JSON body

Security & Privacy

  • All data is sent to https://ai-service-hub-15.emergent.host over HTTPS/TLS.
  • No data is stored permanently; requests are processed and discarded.
  • Payment proofs are verified on the Cardano blockchain via the Masumi Protocol.
  • No filesystem access or shell execution required.

Model Invocation Note

This skill calls the NEXUS AI service API which uses LLM models (GPT-5.2, Claude Sonnet 4.5, GPT-4o) to process requests. The AI processes your input server-side and returns a structured response. You may opt out by not installing this skill.

Trust Statement

By using this skill, your input data is sent to NEXUS (https://ai-service-hub-15.emergent.host) for AI processing. Payments are non-custodial via the Masumi Protocol on Cardano. Only install if you trust NEXUS as a service provider. Visit https://ai-service-hub-15.emergent.host for full documentation.

Tags

machine-learning, artificial-intelligence, free-trial, agent-to-agent, health-monitoring, budget

Comments

Loading comments...