← Back to Skills Marketplace
Pipeworx mhw
by
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
68
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-mhw
Description
MHW MCP — Monster Hunter World data (mhw-db.com, free, no auth)
Usage Guidance
This skill likely does what it says (fetch MHW data), but the runtime step executes a remote npm package via npx and connects to gateway.pipeworx.io — that can run arbitrary code and network requests. Before installing: 1) Confirm you have/allow 'npx' and understand that it will fetch 'mcp-remote@latest'; 2) Prefer a pinned package version and a verifiable checksum or an explicit install spec rather than 'latest'; 3) Review the mcp-remote package source or ask the author to provide a vendored/package-managed install; 4) If you proceed, run it in a restricted/sandboxed environment and avoid supplying any secrets. If the publisher can explain why 'npx' wasn't listed in required binaries and can provide a pinned, reproducible install, the risk would be much lower.
Capability Analysis
Type: OpenClaw Skill
Name: pipeworx-mhw
Version: 1.0.0
The skill utilizes 'npx -y mcp-remote@latest' to connect to a remote gateway (gateway.pipeworx.io), which effectively executes remote code and proxies tool calls to an external third-party service. While this behavior is consistent with the stated purpose of a remote MCP server for Monster Hunter World data, the reliance on an external endpoint and the execution of unpinned remote packages via npx introduce significant supply chain and data privacy risks.
Capability Assessment
Purpose & Capability
Stated purpose is to provide MHW data (mhw-db). That capability can legitimately use a remote connector, but the skill declares no required binaries or install steps while the instructions rely on 'npx' and a remote package — an inconsistency.
Instruction Scope
SKILL.md tells the agent to run 'npx -y mcp-remote@latest https://gateway.pipeworx.io/mhw/mcp', which will download and execute code and contact an external gateway. This goes beyond simply fetching public API data and gives broad runtime discretion to execute remote package code.
Install Mechanism
There is no formal install spec, yet the instructions rely on npx to pull 'mcp-remote@latest' from npm at runtime. Unpinned, dynamic installs from npm introduce supply-chain risk; the absence of an explicit requirement for 'npx' is also an incoherence.
Credentials
The skill declares no environment variables or credentials and the described data source is public, so requested secrets would be disproportionate. No hidden env access was observed in SKILL.md.
Persistence & Privilege
always is false and the skill does not request permanent presence or modify other skills. Autonomous invocation is allowed (default) but not combined with other high privileges here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pipeworx-mhw - After installation, invoke the skill by name or use
/pipeworx-mhw - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pipeworx mhw?
MHW MCP — Monster Hunter World data (mhw-db.com, free, no auth). It is an AI Agent Skill for Claude Code / OpenClaw, with 68 downloads so far.
How do I install Pipeworx mhw?
Run "/install pipeworx-mhw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pipeworx mhw free?
Yes, Pipeworx mhw is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pipeworx mhw support?
Pipeworx mhw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pipeworx mhw?
It is built and maintained by Bruce Gutman (@b-gutman); the current version is v1.0.0.
More Skills