Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

NEXUS Quick Translate

v1.1.0

Fast lightweight translation for short texts

0· 335·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for cyberforexblockchain/nexus-quick-translate.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "NEXUS Quick Translate" (cyberforexblockchain/nexus-quick-translate) from ClawHub.
Skill page: https://clawhub.ai/cyberforexblockchain/nexus-quick-translate
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: NEXUS_PAYMENT_PROOF
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install nexus-quick-translate

ClawHub CLI

Package manager switcher

npx clawhub@latest install nexus-quick-translate
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description (quick translate) match the runtime instructions (POST to an external translate endpoint). However, the skill declares NEXUS_PAYMENT_PROOF as a required env var/primary credential even though the SKILL.md documents multiple payment flows (x402/MPP/legacy header and sandbox_test). Requiring a permanent env var for a payment proof is plausible but not strictly necessary and is a design choice worth questioning.
Instruction Scope
Instructions are narrowly scoped to network calls to a single external service (ai-service-hub-15.emergent.host) and payment flows; they do not request filesystem or shell access and do not instruct collecting unrelated system data. They do ask the agent to POST signed Stellar XDRs for fee sponsorship, which is consistent with the payment protocol described.
Install Mechanism
This is an instruction-only skill with no install spec and no code to write to disk. That minimizes installation risk.
!
Credentials
Only one env var is requested (NEXUS_PAYMENT_PROOF) which is consistent with a payment credential, but making it required and the primary credential increases risk: payment proofs/tokens are sensitive and the SKILL.md also documents alternate header-based and sandbox flows, so requiring an env var may be unnecessary. The skill does not request other unrelated credentials, which is good.
Persistence & Privilege
always is false and there is no installation activity that modifies other skills or system-wide config. The skill will operate via normal, user-invocable means and does not request elevated persistence.
What to consider before installing
This skill calls an external paid service (ai-service-hub-15.emergent.host) and expects a payment proof credential. Before installing: (1) Verify you trust the NEXUS service and the listed domain; (2) avoid placing long-lived secrets in your environment if possible — prefer supplying payment credentials per-request (Authorization/X-PAYMENT headers) or use the documented sandbox_test for testing; (3) confirm how NEXUS expects payment proofs to be created/stored and read their full documentation; (4) if you must store NEXUS_PAYMENT_PROOF as an env var, treat it like a secret (limit scope, rotate, and avoid sharing); (5) test with the sandbox flow first and monitor network requests from your agent. If you need greater assurance, request the skill owner to make the env var optional and to publish verifiable service documentation or source code.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Clawdis
EnvNEXUS_PAYMENT_PROOF
Primary envNEXUS_PAYMENT_PROOF
aivk978028r6gst61bkghdpmzn5g984h4dgcardanovk978028r6gst61bkghdpmzn5g984h4dglatestvk978028r6gst61bkghdpmzn5g984h4dgstellarvk978028r6gst61bkghdpmzn5g984h4dgx402vk978028r6gst61bkghdpmzn5g984h4dg
335downloads
0stars
2versions
Updated 15h ago
v1.1.0
MIT-0

Quick Translate

NEXUS Agent-as-a-Service on Cardano + Stellar | Price: $0.03/request | Accepts: ADA, DJED, iUSD, USDCx, USDM (Cardano) + USDC, XLM (Stellar)

When to use

Use when you need to fast lightweight translation for short texts.

Steps

Option A: x402 Standard (Recommended)

  1. Call the service endpoint without payment headers.
  2. Receive HTTP 402 with WWW-Authenticate: Payment header AND x402 accepts[] array in response body.
  3. Select a paymentRequirement from accepts[] matching your preferred network + asset.
  4. Networks: cardano:mainnet (ADA, DJED, iUSD, USDCx, USDM), stellar:pubnet (USDC, XLM), sandbox (free).
  5. Send payment to the payTo address for maxAmountRequired in the specified asset.
  6. Stellar fee sponsorship: POST your signed XDR to https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor — NEXUS pays gas, you need 0 XLM.
  7. Retry with X-PAYMENT: <base64url JSON {x402Version:1, scheme:"exact", network, payload:{tx_hash, currency}}> header.
  8. Parse the JSON response and X-PAYMENT-RESPONSE header.

Option B: MPP Standard

  1. Call the service endpoint without payment headers.
  2. Receive HTTP 402 with WWW-Authenticate: Payment header listing all accepted currencies and amounts.
  3. Pick your preferred chain + currency: Cardano (ADA, stablecoins) or Stellar (USDC, XLM).
  4. Create payment: Masumi escrow (Cardano) or direct Stellar transfer.
  5. Stellar fee sponsorship: POST your signed XDR to https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor — NEXUS pays gas, you need 0 XLM.
  6. Retry with Authorization: Payment <base64url-credential> header.
  7. Parse the JSON response and Payment-Receipt header.

Option C: Legacy Header

  1. Send a POST request to the NEXUS API endpoint with your input.
  2. Include the X-Payment-Proof header (Masumi payment ID or sandbox_test for testing).
  3. Parse the JSON response and return the result.

API Call

curl -X POST https://ai-service-hub-15.emergent.host/api/original-services/quick-translate \
  -H "Content-Type: application/json" \
  -H "X-Payment-Proof: $NEXUS_PAYMENT_PROOF" \
  -d '{
  "input": "Example input for Quick Translate"
}'

Endpoint: https://ai-service-hub-15.emergent.host/api/original-services/quick-translate Method: POST Headers:

  • Content-Type: application/json
  • X-PAYMENT: <base64url JSON> (x402 standard — recommended)
  • Authorization: Payment <credential> (MPP standard)
  • X-Payment-Proof: <masumi_payment_id> (legacy — use sandbox_test for free testing)

Accepted Currencies: ADA, DJED, iUSD, USDCx, USDM (Cardano) | USDC, XLM (Stellar) x402 Discovery: GET https://ai-service-hub-15.emergent.host/api/mpp/x402 (all services in native x402 format) MPP Discovery: GET https://ai-service-hub-15.emergent.host/api/mpp/discover Stablecoin Registry: GET https://ai-service-hub-15.emergent.host/api/mpp/stablecoins (includes on-chain policy IDs) Stellar Info: GET https://ai-service-hub-15.emergent.host/api/mpp/stellar (assets, recipient, fee sponsorship) Fee Sponsorship: POST https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor (NEXUS pays Stellar gas — agents need 0 XLM)

External Endpoints

URLMethodData Sent
https://ai-service-hub-15.emergent.host/api/original-services/quick-translatePOSTInput parameters as JSON body

Security & Privacy

  • All data is sent to https://ai-service-hub-15.emergent.host over HTTPS/TLS.
  • No data is stored permanently; requests are processed and discarded.
  • Payment proofs are verified on the Cardano blockchain via the Masumi Protocol.
  • No filesystem access or shell execution required.

Model Invocation Note

This skill calls the NEXUS AI service API which uses LLM models (GPT-5.2, Claude Sonnet 4.5, GPT-4o) to process requests. The AI processes your input server-side and returns a structured response. You may opt out by not installing this skill.

Trust Statement

By using this skill, your input data is sent to NEXUS (https://ai-service-hub-15.emergent.host) for AI processing. Payments are non-custodial via the Masumi Protocol on Cardano. Only install if you trust NEXUS as a service provider. Visit https://ai-service-hub-15.emergent.host for full documentation.

Tags

machine-learning, artificial-intelligence, free-trial, agent-to-agent, health-monitoring, budget

Comments

Loading comments...