nexo-brain — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited nexo-brain (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill installs the runtime core used by NEXO Desktop. It provides local memory, Deep Sleep, Evolution support-ticket mode, skills, watchdog, followups, and MCP tools through the existing compatibility package.
If your OpenClaw client shows an install action for this skill, use that first. It installs the compatibility package used by the NEXO Desktop runtime via your configured Node package manager.
If you are setting it up manually, install the runtime core:
npx nexo-brainAfter the runtime is installed, add the MCP server to your OpenClaw config (~/.openclaw/openclaw.json):
{
"mcp": {
"servers": {
"nexo-brain": {
"command": "python3",
"args": ["~/.nexo/server.py"],
"env": {
"NEXO_HOME": "~/.nexo"
}
}
}
}
}Restart the gateway: openclaw gateway restart
Key runtime capabilities include:
NEXO keeps local working memory and long-term memory on device:
Deep Sleep consolidates, prunes, and merges memory so the runtime stays useful without sending private examples to public services.
| Tool | When to Use |
|---|---|
nexo_startup | Once at session start — registers session, returns active sessions |
nexo_heartbeat | Every interaction — updates task, checks inbox |
nexo_cognitive_retrieve | Semantic search across all memories |
nexo_guard_check | Before editing code — checks for past errors |
nexo_learning_add | After resolving an error — prevents recurrence |
nexo_session_diary_write | Before closing session — enables continuity |
nexo_cognitive_trust | After user feedback — calibrates rigor level |
Everything stays local by default in ~/.nexo/. Support and improvement tickets are anonymized: personal names, client data, examples, and private content are not sent.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.