← Back to Skills Marketplace
Pipeworx launches
by
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
72
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-launches
Description
Launches MCP — wraps Launch Library 2 API (ll.thespacedevs.com, free, no auth)
Usage Guidance
Before installing: be aware this skill tells the agent to run 'npx -y mcp-remote@latest' and connect to gateway.pipeworx.io — that downloads and executes code from npm each time. If you trust Pipeworx and the mcp-remote package, this may be acceptable. To reduce risk: ensure 'npx' is available in a controlled environment, ask the author to pin a specific package version (avoid @latest), review the mcp-remote package source on npm/GitHub, and confirm the gateway URL is legitimate. If you cannot verify the package or gateway, avoid installing or restrict the agent's network/execution privileges.
Capability Analysis
Type: OpenClaw Skill
Name: pipeworx-launches
Version: 1.0.0
The skill bundle provides a standard configuration for an MCP (Model Context Protocol) server that wraps the Launch Library 2 API. It uses the 'mcp-remote' utility to connect to a gateway at gateway.pipeworx.io. No malicious code, data exfiltration patterns, or prompt injection attempts were identified in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
The skill claims to wrap Launch Library 2 (ll.thespacedevs.com) which is plausible, but the SKILL.md's Connect snippet requires running 'npx' to fetch 'mcp-remote@latest' and connect to https://gateway.pipeworx.io/launches/mcp. The metadata declared no required binaries, yet the runtime clearly depends on 'npx' being present. This mismatch is incoherent and should be fixed or explained.
Instruction Scope
The runtime instructions ask the agent to run a one‑line npx command that will download and execute code from the npm registry and open a network connection to gateway.pipeworx.io. While this is consistent with providing a remote wrapper, it expands the agent's runtime privileges beyond simple API calls (remote code execution and external network communication). There are no instructions to read local files or env vars, but the executed package could perform arbitrary actions.
Install Mechanism
There is no install spec, but the Connect snippet relies on npx to dynamically fetch and run 'mcp-remote@latest'. Fetching the latest package at runtime from npm is a supply‑chain risk (arbitrary code execution, version drift). The source (npm) is a common package host, but using @latest without pinning increases risk; the Connect URL points to a third‑party gateway rather than directly to the Launch Library API.
Credentials
The skill declares no required environment variables or credentials, which aligns with a free/no‑auth wrapper. However, because it executes a downloaded package and connects to a remote gateway, it could exfiltrate data without needing declared credentials. The lack of declared env requirements is not malicious by itself but reduces transparency.
Persistence & Privilege
The skill is not always-enabled and is user-invocable (normal). It does not request persistent system-wide privileges or modification of other skills. The main privilege of concern is runtime code execution via npx, not persistent presence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pipeworx-launches - After installation, invoke the skill by name or use
/pipeworx-launches - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pipeworx launches?
Launches MCP — wraps Launch Library 2 API (ll.thespacedevs.com, free, no auth). It is an AI Agent Skill for Claude Code / OpenClaw, with 72 downloads so far.
How do I install Pipeworx launches?
Run "/install pipeworx-launches" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pipeworx launches free?
Yes, Pipeworx launches is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pipeworx launches support?
Pipeworx launches is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pipeworx launches?
It is built and maintained by Bruce Gutman (@brucegutman); the current version is v1.0.0.
More Skills