← Back to Skills Marketplace
Pipeworx flood
by
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
89
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-flood
Description
River discharge and flood forecasts for any location — up to 92 days ahead via Open-Meteo
Usage Guidance
This skill forwards user-supplied coordinates to a third-party gateway (gateway.pipeworx.io) and the docs suggest using 'npx mcp-remote@latest' which would download and run code from npm at runtime — neither of which is clearly declared in the metadata. Before installing: (1) confirm you trust pipeworx.io and review its privacy/publishing policy (what it logs/retains); (2) ask the publisher why Open‑Meteo calls are proxied and request direct Open‑Meteo endpoints or transparency about the gateway's behavior; (3) note that Node/npx is implicitly required — avoid running npx mcp-remote unless you can inspect the package source or run in a sandbox; (4) do not send sensitive or private location coordinates until you verify the gateway's data handling; (5) if you prefer, implement direct calls to Open‑Meteo yourself using curl to avoid third‑party proxies.
Capability Analysis
Type: OpenClaw Skill
Name: pipeworx-flood
Version: 1.0.0
The skill bundle provides river discharge and flood forecast data via the Open-Meteo API. It utilizes a remote MCP server configuration (gateway.pipeworx.io) and standard tools (curl, npx) to fetch environmental data. No indicators of data exfiltration, malicious execution, or prompt injection were found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
The name/description state the skill uses Open‑Meteo, which is plausible, but the runtime example and MCP config send requests to https://gateway.pipeworx.io/flood/mcp rather than directly to Open‑Meteo. The MCP config also expects 'npx' (Node/npm) to run mcp-remote, yet the skill's declared required binaries list only 'curl'. Requiring a remote gateway proxy and an undeclared runtime (npx) is disproportionate to the simple stated purpose and is an incoherence.
Instruction Scope
The SKILL.md instructs the agent to POST user-supplied coordinates to a third‑party endpoint (gateway.pipeworx.io) and to configure an MCP remote using npx which will download and run code from npm at runtime. Those instructions cause user data (locations) to be transmitted to an external service and implicitly invoke remote code — neither of which is called out in the metadata. There is no guidance about what the gateway does with data or whether credentials are required.
Install Mechanism
There is no formal install spec, but the provided MCP config explicitly uses 'npx -y mcp-remote@latest', which would fetch and run code from the npm registry at runtime. That pattern is higher risk (remote package download and execution) and is not declared in the skill's requirements. The SKILL.md relies on runtime installation via npx without declaring Node/npx as required.
Credentials
The skill declares no required environment variables or credentials, which is consistent with a simple read-only forecast service. However, because it forwards requests to a third party (pipeworx gateway), it's unclear whether that gateway requires authentication or logs/transforms data. The lack of declared credentials is not malicious but reduces transparency about where location data will go.
Persistence & Privilege
No 'always: true' flag, no required config paths, and no declared persistence. The skill is user-invocable only and does not request elevated agent-wide privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pipeworx-flood - After installation, invoke the skill by name or use
/pipeworx-flood - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pipeworx flood?
River discharge and flood forecasts for any location — up to 92 days ahead via Open-Meteo. It is an AI Agent Skill for Claude Code / OpenClaw, with 89 downloads so far.
How do I install Pipeworx flood?
Run "/install pipeworx-flood" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pipeworx flood free?
Yes, Pipeworx flood is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pipeworx flood support?
Pipeworx flood is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pipeworx flood?
It is built and maintained by Bruce Gutman (@b-gutman); the current version is v1.0.0.
More Skills