← Back to Skills Marketplace
Pipeworx Analyst
by
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
80
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-analyst
Description
Access 252 data sources via one gateway to query trade, finance, pharma, housing, and government contracts using natural language questions.
Usage Guidance
Do not install or use this skill unless you trust the external gateway and have clear answers to: (1) Who operates gateway.pipeworx.io (company/owner/public repo)? (2) How is authentication handled—does the gateway hold API keys centrally or will you need to provide credentials? (3) What data is sent, logged, or persisted by the gateway (including 'remember' entries)? retention and deletion policies? (4) Is traffic encrypted and who can access logs? Ask the publisher for a homepage/source repo, a privacy/security FAQ, and a list of required credentials. Test with non-sensitive queries first. If you cannot get satisfactory answers, avoid sending any sensitive data or secrets to this skill and do not enable autonomous invocation for agents that can call it.
Capability Analysis
Type: OpenClaw Skill
Name: pipeworx-analyst
Version: 1.0.0
The skill bundle serves as a configuration and instruction set for an MCP (Model Context Protocol) gateway connecting to `gateway.pipeworx.io`. The instructions in SKILL.md and the configuration in _meta.json are consistent with the stated purpose of providing a data analysis interface for various public and commercial data sources (trade, finance, pharma). No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
Capability Assessment
Purpose & Capability
The SKILL.md consistently points the agent at an external gateway (https://gateway.pipeworx.io/mcp) to access many data sources, which is coherent with the 'one gateway' description. However, several listed backends (e.g., ATTOM, paid/commercial APIs) normally require provider-specific API keys or contracts. The skill declares no credentials, no homepage, and no source — it's unclear whether the gateway holds credentials centrally or expects the user to provide them. The absence of that explanation is a mismatch between claimed capability and the transparency a user would reasonably expect.
Instruction Scope
The runtime instructions tell the agent to call remote functions (ask_pipeworx, discover_tools, remember, recall) against an external URL. There is no guidance or limit on what context or conversation data will be sent to that endpoint. The 'remember' primitive implies persistent storage of findings on the gateway side. Because the skill delegates queries and context to an external service without describing data handling or allowed payloads, it creates a risk of unintentional disclosure of PII, secrets, or sensitive documents.
Install Mechanism
This is instruction-only with no install spec and no code files, so nothing is written to disk by the skill itself. That minimizes local install risk. The primary risk is network: outgoing requests to an external gateway described in SKILL.md.
Credentials
The skill declares no required environment variables or primary credential, yet it claims access to many third-party sources that often require their own API keys. Omitting any mention of authentication, credential scoping, or how secrets (if any) should be provided is suspicious. Additionally, because the instructions do not constrain what gets sent to the gateway, any environment variables or agent context could be exfiltrated if the agent forwards them during a call.
Persistence & Privilege
The skill is not forced always-on (always: false), but autonomous invocation is allowed (the platform default). Combined with the 'remember'/'recall' semantics and an external gateway of unknown ownership, this creates a persistent-data risk: the gateway may retain logs, remembered context, and query history beyond your control. The skill does not document retention, access controls, or deletion procedures.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pipeworx-analyst - After installation, invoke the skill by name or use
/pipeworx-analyst - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pipeworx Analyst?
Access 252 data sources via one gateway to query trade, finance, pharma, housing, and government contracts using natural language questions. It is an AI Agent Skill for Claude Code / OpenClaw, with 80 downloads so far.
How do I install Pipeworx Analyst?
Run "/install pipeworx-analyst" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pipeworx Analyst free?
Yes, Pipeworx Analyst is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pipeworx Analyst support?
Pipeworx Analyst is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pipeworx Analyst?
It is built and maintained by Bruce Gutman (@brucegutman); the current version is v1.0.0.
More Skills