← Back to Skills Marketplace
b-gutman

Pipeworx movies

by Bruce Gutman · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
76
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-movies
Description
Movies MCP — wraps iTunes Search API (movies, free, no auth) and TVmaze API (TV shows, free, no au
Usage Guidance
This skill appears to do what it claims (wrap public movie/TV APIs) but the runtime instructions ask the agent to run npx to fetch and execute mcp-remote@latest against gateway.pipeworx.io. That means code will be downloaded and run from the network and can change over time. Before installing: (1) confirm you trust the pipeworx.io gateway and the mcp-remote npm package author; (2) prefer a pinned package version instead of @latest; (3) ensure npx/Node availability is acceptable and explicitly declared; (4) consider reviewing the mcp-remote package source and gateway behavior, or run the skill in a sandboxed environment; (5) note that although no credentials are requested, a malicious remote package could attempt to read or transmit local environment data, so avoid running it with sensitive secrets present.
Capability Analysis
Type: OpenClaw Skill Name: pipeworx-movies Version: 1.0.0 The pipeworx-movies skill is a standard Model Context Protocol (MCP) wrapper for movie and TV show search APIs (iTunes and TVmaze). It uses the mcp-remote utility to connect to a hosted gateway at gateway.pipeworx.io, which is a common pattern for remote MCP servers. No malicious code, data exfiltration, or prompt injection attempts were identified in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
The skill claims to wrap iTunes Search and TVmaze (both public, no-auth APIs). The provided connect snippet (npx mcp-remote ... gateway.pipeworx.io) is consistent with providing a remote MCP proxy for those APIs. However, the SKILL.md does not declare that the agent needs npx/Node available, which is a mismatch between stated requirements and actual runtime needs.
Instruction Scope
SKILL.md instructs the agent to run npx to download and execute mcp-remote@latest pointed at a remote gateway URL. That means arbitrary code will be fetched from npm and executed locally and the agent will communicate with gateway.pipeworx.io. The instructions do not ask for unrelated local files or secrets, but they do enable remote code execution and outbound network calls, which expands the skill's runtime capabilities beyond a simple API wrapper.
Install Mechanism
There is no formal install spec, but the connect snippet relies on npx to fetch and run mcp-remote@latest from npm at runtime. Download-and-execute via npx (especially using @latest) is a moderate-to-high risk install mechanism because it executes remotely-sourced code whose exact contents can change and whose provenance may be unclear.
Credentials
The skill declares no environment variables, credentials, or config paths and the instructions do not request local secrets. This is proportionate to the claimed purpose (public, no-auth APIs). Note: running external packages may still access environment data if the package is malicious, but no envs are requested by the skill itself.
Persistence & Privilege
always is false and there is no request to modify other skills or system-wide settings. The skill does instruct transient execution of an external package but does not request permanent presence or elevated platform privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install pipeworx-movies
  3. After installation, invoke the skill by name or use /pipeworx-movies
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Slug pipeworx-movies
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Pipeworx movies?

Movies MCP — wraps iTunes Search API (movies, free, no auth) and TVmaze API (TV shows, free, no au. It is an AI Agent Skill for Claude Code / OpenClaw, with 76 downloads so far.

How do I install Pipeworx movies?

Run "/install pipeworx-movies" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Pipeworx movies free?

Yes, Pipeworx movies is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Pipeworx movies support?

Pipeworx movies is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Pipeworx movies?

It is built and maintained by Bruce Gutman (@b-gutman); the current version is v1.0.0.

💬 Comments