360 Secure SkillHub
360 安全技能中心

NEXUS Code Review

该 Skill 把待审查代码提交到 NEXUS 外部服务,由服务端模型完成安全性、性能和代码风格分析并返回结构化结果。调用需按 x402、MPP 或旧版请求头方式提供支付凭证,支持多条区块链及其稳定币结算;除调用流程说明外不含本地分析逻辑。

cyberforexblockchain
cyberforexblockchain
热度 55.63
最近更新 2026-05-26 03:26:58
分类:开发依赖:第三方 API / 代码执行应用场景:代码审查 / API 集成

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add nexus-code-review
Metadata
name
nexus-code-review
description
Security, performance, and style analysis for code
version
2.1.0
capabilities
[{"id":"invoke-code-review","description":"Security, performance, and style analysis for code"}]
permissions
{"network":true,"filesystem":false,"shell":false}
inputs
[{"name":"input","type":"string","required":true,"description":"The input text or query"}]
outputs
{"type":"object","properties":{"result":{"type":"string","description":"The service response"}}}
requires
{"env":["NEXUS_PAYMENT_PROOF"]}
protocols
["masumi","mpp","x402","ap2","xrpl","a2a"]
payment
{"mpp_standard":"IETF draft-httpauth-payment-00","accepted_currencies":["ADA","DJED","iUSD","USDCx","USDM","USDC","XLM","XRP","RLUSD"],"supported_chains":["cardano","stellar","xrpl"],"ap2_supported":true,"batch_settlement":true,"mpp_discovery":"https://ai-service-hub-15.emergent.host/api/mpp/discover","ap2_config":"https://ai-service-hub-15.emergent.host/api/ap2/config","xrpl_config":"https://ai-service-hub-15.emergent.host/api/xrpl/config","stablecoin_registry":"https://ai-service-hub-15.emergent.host/api/mpp/stablecoins"}
metadata
{"openclaw":{"emoji":"\u26a1","requires":{"env":["NEXUS_PAYMENT_PROOF"]},"primaryEnv":"NEXUS_PAYMENT_PROOF"}}

Code Review API

NEXUS Agent-as-a-Service on Cardano + Stellar + XRPL | Price: $0.25/request | Accepts: ADA, DJED, iUSD, USDCx, USDM (Cardano) + USDC, XLM (Stellar) + XRP, RLUSD (XRPL)

When to use

Use when you need a security and quality review of code. Finds bugs, vulnerabilities, and suggests improvements.

Steps

Option A: x402 Standard (Recommended)

  1. Call the service endpoint without payment headers.
  2. Receive HTTP 402 with WWW-Authenticate: Payment header AND x402 accepts[] array in response body.
  3. Select a paymentRequirement from accepts[] matching your preferred network + asset.
  4. Networks: cardano:mainnet (ADA, DJED, iUSD, USDCx, USDM), stellar:pubnet (USDC, XLM), sandbox (free).
  5. Send payment to the payTo address for maxAmountRequired in the specified asset.
  6. Stellar fee sponsorship: POST your signed XDR to https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor — NEXUS pays gas, you need 0 XLM.
  7. Retry with X-PAYMENT: <base64url JSON {x402Version:1, scheme:"exact", network, payload:{tx_hash, currency}}> header.
  8. Parse the JSON response and X-PAYMENT-RESPONSE header.

Option B: MPP Standard

  1. Call the service endpoint without payment headers.
  2. Receive HTTP 402 with WWW-Authenticate: Payment header listing all accepted currencies and amounts.
  3. Pick your preferred chain + currency: Cardano (ADA, stablecoins) or Stellar (USDC, XLM).
  4. Create payment: Masumi escrow (Cardano) or direct Stellar transfer.
  5. Stellar fee sponsorship: POST your signed XDR to https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor — NEXUS pays gas, you need 0 XLM.
  6. Retry with Authorization: Payment <base64url-credential> header.
  7. Parse the JSON response and Payment-Receipt header.

Option C: Legacy Header

  1. Send a POST request to the NEXUS API endpoint with your input.
  2. Include the X-Payment-Proof header (Masumi payment ID or sandbox_test for testing).
  3. Parse the JSON response and return the result.

API Call

curl -X POST https://ai-service-hub-15.emergent.host/api/original-services/code-review \
  -H "Content-Type: application/json" \
  -H "X-Payment-Proof: $NEXUS_PAYMENT_PROOF" \
  -d '{"code": "def login(user, pwd): ..."}'

Endpoint: https://ai-service-hub-15.emergent.host/api/original-services/code-review Method: POST Headers:

  • Content-Type: application/json
  • X-PAYMENT: <base64url JSON> (x402 standard — recommended)
  • Authorization: Payment <credential> (MPP standard)
  • X-Payment-Proof: <masumi_payment_id> (legacy — use sandbox_test for free testing)

Accepted Currencies: ADA, DJED, iUSD, USDCx, USDM (Cardano) | USDC, XLM (Stellar) | XRP, RLUSD (XRPL) AP2 (Google Agent Payments Protocol): Pre-authorize payments via mandates, settle atomically. See https://ai-service-hub-15.emergent.host/api/ap2/config. XRPL Batch Settlement: Settle up to 20 mandates in ONE tx with ~5s finality. See skill nexus-ap2-batched-settle. x402 Discovery: GET https://ai-service-hub-15.emergent.host/api/mpp/x402 (all services in native x402 format) MPP Discovery: GET https://ai-service-hub-15.emergent.host/api/mpp/discover Stablecoin Registry: GET https://ai-service-hub-15.emergent.host/api/mpp/stablecoins (includes on-chain policy IDs) Stellar Info: GET https://ai-service-hub-15.emergent.host/api/mpp/stellar (assets, recipient, fee sponsorship) Fee Sponsorship: POST https://ai-service-hub-15.emergent.host/api/mpp/stellar/sponsor (NEXUS pays Stellar gas — agents need 0 XLM)

External Endpoints

URL Method Data Sent
https://ai-service-hub-15.emergent.host/api/original-services/code-review POST Input parameters as JSON body

Security & Privacy

  • All data is sent to https://ai-service-hub-15.emergent.host over HTTPS/TLS.
  • No data is stored permanently; requests are processed and discarded.
  • Payment proofs are verified on the Cardano blockchain via the Masumi Protocol.
  • No filesystem access or shell execution required.

Model Invocation Note

This skill calls the NEXUS AI service API which uses LLM models (GPT-5.2, Claude Sonnet 4.5, GPT-4o) to process requests. The AI processes your input server-side and returns a structured response. You may opt out by not installing this skill.

Trust Statement

By using this skill, your input data is sent to NEXUS (https://ai-service-hub-15.emergent.host) for AI processing. Payments are non-custodial via the Masumi Protocol on Cardano. Only install if you trust NEXUS as a service provider. Visit https://ai-service-hub-15.emergent.host for full documentation.

Tags

machine-learning, artificial-intelligence, free-trial, agent-to-agent, health-monitoring, budget