← Back to Skills Marketplace
Pipeworx lorem
by
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
76
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-lorem
Description
Lorem MCP — wraps loripsum.net (free, no auth)
Usage Guidance
This skill is plausible for generating lorem text, but it asks your agent to npx-execute mcp-remote@latest and connect to https://gateway.pipeworx.io/lorem/mcp — meaning remote code will run and your prompts/contexts may be sent to a third party. Before installing: ensure you trust pipeworx/gateway.pipeworx.io; verify that running npx on 'latest' is acceptable (unpinned versions can change behavior); avoid using the skill with sensitive data; confirm your environment has 'npx' if you want it to work; for lower risk, prefer a skill that calls loripsum.net directly or uses a pinned, audited package and documents exactly what data is sent.
Capability Analysis
Type: OpenClaw Skill
Name: pipeworx-lorem
Version: 1.0.0
The skill bundle provides documentation and configuration for a Lorem Ipsum generator that interfaces with a remote MCP server. It uses the `mcp-remote` utility via `npx` to connect to `https://gateway.pipeworx.io/lorem/mcp`, which is a standard integration pattern for hosted Model Context Protocol services. No evidence of data exfiltration, malicious execution, or prompt injection was found in `SKILL.md` or `_meta.json`.
Capability Assessment
Purpose & Capability
The skill description says it simply wraps loripsum.net (no auth), but the SKILL.md expects to run an npm package (mcp-remote@latest) and connect to https://gateway.pipeworx.io/lorem/mcp. A simple lorem generator could directly call loripsum.net; requiring remote code execution and a gateway is not justified by the stated purpose. Also the registry metadata lists no required binaries yet the connect config assumes 'npx' is available.
Instruction Scope
Runtime instructions instruct the agent to run npx to fetch and execute mcp-remote and to connect to an external MCP gateway. This routes agent traffic and possibly conversation/context to a third-party service; SKILL.md does not describe what data is sent. The instructions do not reference local files or env vars, but they do grant broad discretion to run remote code and transmit data to gateway.pipeworx.io.
Install Mechanism
There is no install spec in the package, but the provided connect snippet uses npx to execute mcp-remote@latest at runtime. That performs an on-demand download-and-execute of code from the npm registry (latest, unpinned), which can run arbitrary code and is higher risk than a purely instruction-only skill or a pinned dependency.
Credentials
The skill declares no required environment variables or credentials, which is consistent with a public lorem service. However, because it forwards requests to an external gateway, it may transmit agent context or user-provided prompts to a third party — a potential data-leak risk even without declared secrets.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system-level privileges or configuration changes. Autonomous invocation is allowed (platform default) but not combined with other high privileges here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pipeworx-lorem - After installation, invoke the skill by name or use
/pipeworx-lorem - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pipeworx lorem?
Lorem MCP — wraps loripsum.net (free, no auth). It is an AI Agent Skill for Claude Code / OpenClaw, with 76 downloads so far.
How do I install Pipeworx lorem?
Run "/install pipeworx-lorem" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pipeworx lorem free?
Yes, Pipeworx lorem is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pipeworx lorem support?
Pipeworx lorem is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pipeworx lorem?
It is built and maintained by Bruce Gutman (@b-gutman); the current version is v1.0.0.
More Skills