← Back to Skills Marketplace
Pipeworx microlink
by
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
71
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-microlink
Description
Microlink MCP — wraps Microlink API (free tier, no auth required)
Usage Guidance
This skill asks your agent to run 'npx -y mcp-remote@latest' and connect to a remote Pipeworx gateway, which will download and execute code from npm at runtime. That can run arbitrary code and send data off-host. Before installing: (1) verify the mcp-remote package on the npm registry (author, package contents, recent changes); (2) ask the publisher to pin a specific version or provide an audited package/binary instead of 'latest'; (3) confirm the trustworthiness of https://gateway.pipeworx.io and what data will be sent; (4) if you must test, run it in an isolated sandbox with limited network access; (5) prefer a skill that includes an install spec or bundled code you can review rather than one that executes npx on-demand.
Capability Analysis
Type: OpenClaw Skill
Name: pipeworx-microlink
Version: 1.0.0
The skill bundle is a configuration for a remote Model Context Protocol (MCP) server that wraps the Microlink API. It uses 'npx' to execute 'mcp-remote' and connect to a gateway at 'gateway.pipeworx.io'. There is no local executable code, obfuscation, or evidence of malicious intent; the functionality (metadata and screenshots) is consistent with the stated purpose.
Capability Assessment
Purpose & Capability
The skill claims to wrap the Microlink API, which can justify a remote connector. However, the SKILL.md requires running 'npx mcp-remote@latest' against a Pipeworx gateway; that runtime code execution and remote connector behavior are not declared in the metadata or install spec and are heavier than the simple description implies.
Instruction Scope
Runtime instructions tell the agent to run npx to fetch and execute 'mcp-remote@latest' and connect to https://gateway.pipeworx.io/microlink/mcp. While the instructions do not request local files or env vars, they direct the agent to download and run arbitrary code and to communicate with an external service — actions beyond a passive API wrapper description.
Install Mechanism
There is no install spec, but the Connect block uses npx to pull and run the latest version of an npm package at runtime. Using unpinned 'latest' via npx means arbitrary code from the public registry will be executed each time — a high-risk install/runtime mechanism.
Credentials
The skill requests no environment variables or credentials, which is proportionate. However, lack of declared credentials does not mitigate risk that downloaded code could exfiltrate data or access network resources.
Persistence & Privilege
The skill does not request 'always: true' and is user-invocable only. It does not declare persistent system changes. The primary concern is runtime code execution rather than elevated platform privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pipeworx-microlink - After installation, invoke the skill by name or use
/pipeworx-microlink - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pipeworx microlink?
Microlink MCP — wraps Microlink API (free tier, no auth required). It is an AI Agent Skill for Claude Code / OpenClaw, with 71 downloads so far.
How do I install Pipeworx microlink?
Run "/install pipeworx-microlink" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pipeworx microlink free?
Yes, Pipeworx microlink is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pipeworx microlink support?
Pipeworx microlink is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pipeworx microlink?
It is built and maintained by Bruce Gutman (@b-gutman); the current version is v1.0.0.
More Skills