← Back to Skills Marketplace
brucegutman

Pipeworx patents

by Bruce Gutman · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
84
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-patents
Description
Patents MCP — wraps PatentsView API (https://api.patentsview.org/)
Usage Guidance
This skill appears to do what it says (wrap PatentsView) but it instructs the agent to run 'npx -y mcp-remote@latest' and connect to https://gateway.pipeworx.io/patents/mcp. That means code will be downloaded and executed from npm and queries (and any agent context) will go to an external server. Before installing: (1) confirm you trust pipeworx.io and the gateway URL; (2) prefer a pinned package version (not @latest) or review the mcp-remote package source on npm/GitHub; (3) ensure Node/npx are available and include them in the skill metadata; (4) avoid sending sensitive data to the connector, or test in a sandbox; (5) if you need stronger guarantees, ask the publisher for a local-only connector or source you can audit. If you cannot verify the remote package and endpoint, treat this skill as risky.
Capability Analysis
Type: OpenClaw Skill Name: pipeworx-patents Version: 1.0.0 The skill bundle provides a standard configuration for an MCP (Model Context Protocol) server that wraps the PatentsView API. It uses the 'mcp-remote' utility to connect to a remote gateway at gateway.pipeworx.io, which is consistent with its stated purpose of providing patent search tools. No malicious code, data exfiltration logic, or harmful prompt instructions were found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
Name and description (Patents MCP wrapping PatentsView) align with the declared tools. However, the SKILL.md requires running 'npx mcp-remote@latest' to connect to https://gateway.pipeworx.io/patents/mcp, yet the skill metadata declares no required binaries. The missing declaration for Node/npm/npx is an incoherence.
Instruction Scope
Instructions are short and focused on establishing an MCP connection, but they direct the agent to run npx which will execute code it downloads. That execution and the subsequent connection to gateway.pipeworx.io will send queries (and likely any context the agent includes) to that external server — the SKILL.md does not describe what is transmitted or any privacy/usage guarantees.
Install Mechanism
There is no formal install spec, but the connect snippet uses 'npx -y mcp-remote@latest', which downloads and executes the latest package from the public npm registry at runtime. Unpinned '@latest' installs are higher risk because the code executed can change over time; executing remote npm packages without review is a moderate-to-high risk behavior.
Credentials
The skill declares no environment variables or credentials, which is reasonable for a public PatentsView wrapper. However, it fails to declare required runtime tooling (Node/npx). Also, because the agent will connect to an external gateway, any context or user data sent to that gateway should be considered sensitive unless the endpoint's behavior is verified.
Persistence & Privilege
The skill does not request always:true and follows normal autonomous-invocation defaults. Still, allowing the agent to autonomously run 'npx' and execute downloaded code increases blast radius — autonomous invocation combined with remote code execution is riskier than a purely local/instruction-only skill.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install pipeworx-patents
  3. After installation, invoke the skill by name or use /pipeworx-patents
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Slug pipeworx-patents
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Pipeworx patents?

Patents MCP — wraps PatentsView API (https://api.patentsview.org/). It is an AI Agent Skill for Claude Code / OpenClaw, with 84 downloads so far.

How do I install Pipeworx patents?

Run "/install pipeworx-patents" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Pipeworx patents free?

Yes, Pipeworx patents is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Pipeworx patents support?

Pipeworx patents is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Pipeworx patents?

It is built and maintained by Bruce Gutman (@brucegutman); the current version is v1.0.0.

💬 Comments