Skip to main content

nex

Nex provides real-time organizational context for AI agents, enabling insights and record management through a powerful API.

Install this skill

or
0/100

Security score

The nex skill was audited on Jun 8, 2026 and we found 35 security issues across 4 threat categories, including 26 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 141

Piping content to bash shell

SourceSKILL.md
141printf '%s' '{"query":"who are the key contacts at Acme Corp?"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/context/ask
high line 190

Piping content to bash shell

SourceSKILL.md
190"command": "printf '%s' '{\"query\":\"What do I know about John?\"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/context/ask",
high line 291

Piping content to bash shell

SourceSKILL.md
291"command": "printf '%s' '{\"name\":\"Project\",\"name_plural\":\"Projects\",\"slug\":\"project\",\"description\":\"Project tracker\",\"type\":\"custom\"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/
high line 375

Piping content to bash shell

SourceSKILL.md
375"command": "printf '%s' '{\"name\":\"Updated Project\",\"description\":\"Updated description\"}' | bash {baseDir}/scripts/nex-api.sh PATCH /v1/objects/project",
high line 414

Piping content to bash shell

SourceSKILL.md
414"command": "printf '%s' '{\"name\":\"Status\",\"slug\":\"status\",\"type\":\"select\",\"description\":\"Current status\",\"options\":{\"is_required\":true,\"select_options\":[{\"name\":\"Open\"},{\"na
high line 436

Piping content to bash shell

SourceSKILL.md
436"command": "printf '%s' '{\"name\":\"Updated Status\",\"options\":{\"is_required\":false}}' | bash {baseDir}/scripts/nex-api.sh PATCH /v1/objects/project/attributes/456",
high line 475

Piping content to bash shell

SourceSKILL.md
475"command": "printf '%s' '{\"attributes\":{\"name\":{\"first_name\":\"Jane\",\"last_name\":\"Doe\"},\"email\":\"[email protected]\",\"company\":\"Acme Corp\"}}' | bash {baseDir}/scripts/nex-api.sh POST
high line 511

Piping content to bash shell

SourceSKILL.md
511"command": "printf '%s' '{\"matching_attribute\":\"email\",\"attributes\":{\"name\":\"Jane Doe\",\"email\":\"[email protected]\",\"job_title\":\"VP of Sales\"}}' | bash {baseDir}/scripts/nex-api.sh PUT
high line 544

Piping content to bash shell

SourceSKILL.md
544"command": "printf '%s' '{\"attributes\":{\"job_title\":\"CTO\",\"phone\":\"+1-555-0123\"}}' | bash {baseDir}/scripts/nex-api.sh PATCH /v1/records/789",
high line 580

Piping content to bash shell

SourceSKILL.md
580"command": "printf '%s' '{\"attributes\":\"all\",\"limit\":10,\"offset\":0,\"sort\":{\"attribute\":\"updated_at\",\"direction\":\"desc\"}}' | bash {baseDir}/scripts/nex-api.sh POST /v1/objects/person/
high line 669

Piping content to bash shell

SourceSKILL.md
669"command": "printf '%s' '{\"type\":\"one_to_many\",\"entity_definition_1_id\":\"123\",\"entity_definition_2_id\":\"456\",\"entity_1_to_2_predicate\":\"has\",\"entity_2_to_1_predicate\":\"belongs to\"}
high line 734

Piping content to bash shell

SourceSKILL.md
734"command": "printf '%s' '{\"definition_id\":\"789\",\"entity_1_id\":\"1001\",\"entity_2_id\":\"2002\"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/records/1001/relationships",
high line 810

Piping content to bash shell

SourceSKILL.md
810"command": "printf '%s' '{\"name\":\"VIP Contacts\",\"slug\":\"vip-contacts\",\"description\":\"High-value contacts\"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/objects/contact/lists",
high line 859

Piping content to bash shell

SourceSKILL.md
859"command": "printf '%s' '{\"parent_id\":\"789\",\"attributes\":{\"status\":\"active\"}}' | bash {baseDir}/scripts/nex-api.sh POST /v1/lists/456",
high line 874

Piping content to bash shell

SourceSKILL.md
874"command": "printf '%s' '{\"parent_id\":\"789\",\"attributes\":{\"priority\":\"high\"}}' | bash {baseDir}/scripts/nex-api.sh PUT /v1/lists/456",
high line 891

Piping content to bash shell

SourceSKILL.md
891"command": "printf '%s' '{\"attributes\":\"all\",\"limit\":20}' | bash {baseDir}/scripts/nex-api.sh POST /v1/lists/456/records",
high line 906

Piping content to bash shell

SourceSKILL.md
906"command": "printf '%s' '{\"attributes\":{\"status\":\"closed-won\"}}' | bash {baseDir}/scripts/nex-api.sh PATCH /v1/lists/456/records/789",
high line 950

Piping content to bash shell

SourceSKILL.md
950"command": "printf '%s' '{\"title\":\"Follow up with client\",\"description\":\"Discuss contract renewal\",\"priority\":\"high\",\"due_date\":\"2026-03-01T09:00:00Z\",\"entity_ids\":[\"1001\",\"1002\"
high line 1041

Piping content to bash shell

SourceSKILL.md
1041"command": "printf '%s' '{\"priority\":\"urgent\",\"is_completed\":true}' | bash {baseDir}/scripts/nex-api.sh PATCH /v1/tasks/800",
high line 1082

Piping content to bash shell

SourceSKILL.md
1082"command": "printf '%s' '{\"title\":\"Meeting notes\",\"content\":\"Discussed Q3 roadmap...\",\"entity_id\":\"1001\"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/notes",
high line 1153

Piping content to bash shell

SourceSKILL.md
1153"command": "printf '%s' '{\"title\":\"Updated meeting notes\",\"content\":\"Added action items...\"}' | bash {baseDir}/scripts/nex-api.sh PATCH /v1/notes/900",
high line 1192

Piping content to bash shell

SourceSKILL.md
1192"command": "printf '%s' '{\"query\":\"john doe\"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/search",
high line 1240

Piping content to bash shell

SourceSKILL.md
1240"command": "printf '%s' '{\"query\":\"What do I know about John Smith?\"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/context/ask",
high line 1280

Piping content to bash shell

SourceSKILL.md
1280"command": "printf '%s' '{\"content\":\"Had a great call with John Smith from Acme Corp.\",\"context\":\"Sales call notes\"}' | bash {baseDir}/scripts/nex-api.sh POST /v1/context/text",
high line 1356

Piping content to bash shell

SourceSKILL.md
1356"command": "printf '%s' '{\"query\":\"high priority contacts in enterprise deals\",\"object_type\":\"contact\",\"limit\":20,\"include_attributes\":true}' | bash {baseDir}/scripts/nex-api.sh POST /v1/c
high line 1573

Piping content to bash shell

SourceSKILL.md
1573"command": "printf '%s' '{}' | bash {baseDir}/scripts/nex-api.sh POST /v1/integrations/email/google/connect",
medium line 34

Access to hidden dotfiles in home directory

SourceSKILL.md
34- Upsert `skills.entries.nex.env.NEX_API_KEY = <api_key>` in `~/.openclaw/openclaw.json`.
medium line 65

Access to hidden dotfiles in home directory

SourceSKILL.md
65**Shared Config**: Registration data is also saved to `~/.nex-mcp.json` for cross-tool compatibility. If `NEX_API_KEY` is not set, check this file as a fallback:
medium line 123

Access to hidden dotfiles in home directory

SourceSKILL.md
1232. Checks each file against `~/.nex/file-scan-manifest.json` (mtime + size)
medium line 34

Access to .env file

SourceSKILL.md
34- Upsert `skills.entries.nex.env.NEX_API_KEY = <api_key>` in `~/.openclaw/openclaw.json`.
low line 58

Access to .env file

SourceSKILL.md
58| .skills.entries.nex.env.NEX_API_KEY = $api_key
low line 62

Access to .env file

SourceSKILL.md
62jq -e '.skills.entries.nex.env.NEX_API_KEY | type == "string" and length > 0' "$HOME/.openclaw/openclaw.json" >/dev/null
low line 4

Unicode escape sequences

SourceSKILL.md
4metadata: {"clawdbot": {"emoji": "\U0001F4CA", "homepage": "https://github.com/nex-crm/nex-as-a-skill", "primaryEnv": "NEX_API_KEY", "requires": {"env": [], "bins": ["curl", "jq", "bash"]}, "files": [
low line 78

External URL reference

SourceSKILL.md
78- The wrapper validates that all requests go to `https://app.nex.ai/api/developers` only
low line 169

External URL reference

SourceSKILL.md
169| `https://app.nex.ai/api/developers/v1/*` | GET, POST, PUT, PATCH, DELETE | Context queries, records, insights, text content |
Scanned on Jun 8, 2026
View Security Dashboard
Installation guide →
GitHub Stars 47
Rate this skill
Categorydata analytics
UpdatedJune 15, 2026
openclawapidata-analystgrowth-marketerproduct-managercustomer-success-managerbusiness-developmentopenaidata analyticsmarketingproductsales
nex-crm/nex-as-a-skill