Skill: cyberforexblockchain/nexus-code-review (version 2.1.0)

--- name: nexus-code-review description: "Security, performance, and style analysis for code" version: 2.1.0 capabilities: - id: invoke-code-review description: "Security, performance, and style analysis for code" permissions: network: true filesystem: false shell: false inputs: - name: input type: string required: true description: "The input text or query" outputs: type: object properties: result: type: string description: "The service response" requires: env: [NEXUS_PAYMENT_PROOF] protocols: - masumi - mpp - x402 - ap2 - xrpl - a2a payment: mpp_standard: "IETF draft-httpauth-payment-00" accepted_currencies: [ADA, DJED, iUSD, USDCx, USDM, USDC, XLM, XRP, RLUSD] supported_chains: [cardano, stellar, xrpl] ap2_supported: true batch_settlement: true mpp_discovery: "https://ai-service-hub-15.emergent.host/api/mpp/discover" ap2_config: "https://ai-service-hub-15.emergent.host/api/ap2/config" xrpl_config: "https://ai-service-hub-15.emergent.host/api/xrpl/config" stablecoin_registry: "https://ai-service-hub-15.emergent.host/api/mpp/stablecoins" metadata: '{"openclaw":{"emoji":"\u26a1","requires":{"env":["NEXUS_PAYMENT_PROOF"]},"primaryEnv":"NEXUS_PAYMENT_PROOF"}}' --- # Code Review API > NEXUS Agent-as-a-Service on Cardano + Stellar + XRPL | Price: $0.25/request | Accepts: ADA, DJED, iUSD, USDCx, USDM (Cardano) + USDC, XLM (Stellar) + XRP, RLUSD (XRPL) ## When to use Use when you need a security and quality review of code. Finds bugs, vulnerabilities, and suggests improvements. ## Steps ### Option A: x402 Standard (Recommended) 1. Call the service endpoint without payment headers. 2. Receive HTTP 402 with `WWW-Authenticate: Payment` header AND x402 `accepts[]` array in response body. 3. Select a `paymentRequirement` from `accepts[]` matching your preferred network + asset. 4. Networks: `cardano:mainnet` (ADA, DJED, iUSD, USDCx, USDM), `stellar:pubnet` (USDC, XLM), `sandbox` (free). 5. Send payment to the `payTo` address for `maxAmountRequired` in the specified asset. 6. **Stellar fee sponsorship:** POST your signed XDR to `https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor` — NEXUS pays gas, you need 0 XLM. 7. Retry with `X-PAYMENT: <base64url JSON {x402Version:1, scheme:"exact", network, payload:{tx_hash, currency}}>` header. 8. Parse the JSON response and `X-PAYMENT-RESPONSE` header. ### Option B: MPP Standard 1. Call the service endpoint without payment headers. 2. Receive HTTP 402 with `WWW-Authenticate: Payment` header listing all accepted currencies and amounts. 3. Pick your preferred chain + currency: Cardano (ADA, stablecoins) or Stellar (USDC, XLM). 4. Create payment: Masumi escrow (Cardano) or direct Stellar transfer. 5. **Stellar fee sponsorship:** POST your signed XDR to `https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor` — NEXUS pays gas, you need 0 XLM. 6. Retry with `Authorization: Payment <base64url-credential>` header. 7. Parse the JSON response and `Payment-Receipt` header. ### Option C: Legacy Header 1. Send a POST request to the NEXUS API endpoint with your input. 2. Include the `X-Payment-Proof` header (Masumi payment ID or `sandbox_test` for testing). 3. Parse the JSON response and return the result. ### API Call ```bash curl -X POST https://ai-service-hub-15.emergent.host/api/original-services/code-review \ -H "Content-Type: application/json" \ -H "X-Payment-Proof: $NEXUS_PAYMENT_PROOF" \ -d '{"code": "def login(user, pwd): ..."}' ``` **Endpoint:** `https://ai-service-hub-15.emergent.host/api/original-services/code-review` **Method:** POST **Headers:** - `Content-Type: application/json` - `X-PAYMENT: <base64url JSON>` (x402 standard — recommended) - `Authorization: Payment <credential>` (MPP standard) - `X-Payment-Proof: <masumi_payment_id>` (legacy — use `sandbox_test` for free testing) **Accepted Currencies:** ADA, DJED, iUSD, USDCx, USDM (Cardano) | USDC, XLM (Stellar) | XRP, RLUSD (XRPL) **AP2 (Google Agent Payments Protocol):** Pre-authorize payments via mandates, settle atomically. See `https://ai-service-hub-15.emergent.host/api/ap2/config`. **XRPL Batch Settlement:** Settle up to 20 mandates in ONE tx with ~5s finality. See skill `nexus-ap2-batched-settle`. **x402 Discovery:** `GET https://ai-service-hub-15.emergent.host/api/mpp/x402` (all services in native x402 format) **MPP Discovery:** `GET https://ai-service-hub-15.emergent.host/api/mpp/discover` **Stablecoin Registry:** `GET https://ai-service-hub-15.emergent.host/api/mpp/stablecoins` (includes on-chain policy IDs) **Stellar Info:** `GET https://ai-service-hub-15.emergent.host/api/mpp/stellar` (assets, recipient, fee sponsorship) **Fee Sponsorship:** `POST https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor` (NEXUS pays Stellar gas — agents need 0 XLM) ## External Endpoints | URL | Method | Data Sent | |-----|--------|-----------| | `https://ai-service-hub-15.emergent.host/api/original-services/code-review` | POST | Input parameters as JSON body | ## Security & Privacy - All data is sent to `https://ai-service-hub-15.emergent.host` over HTTPS/TLS. - No data is stored permanently; requests are processed and discarded. - Payment proofs are verified on the Cardano blockchain via the Masumi Protocol. - No filesystem access or shell execution required. ## Model Invocation Note This skill calls the NEXUS AI service API which uses LLM models (GPT-5.2, Claude Sonnet 4.5, GPT-4o) to process requests. The AI processes your input server-side and returns a structured response. You may opt out by not installing this skill. ## Trust Statement By using this skill, your input data is sent to NEXUS (https://ai-service-hub-15.emergent.host) for AI processing. Payments are non-custodial via the Masumi Protocol on Cardano. Only install if you trust NEXUS as a service provider. Visit https://ai-service-hub-15.emergent.host for full documentation. ## Tags `machine-learning`, `artificial-intelligence`, `free-trial`, `agent-to-agent`, `health-monitoring`, `budget`


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal:  | SkillSpector: clean (LOW)