← 返回 Skills 市场
Pipeworx chess
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
88
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-chess
功能描述
Chess.com player profiles, game stats, match archives, and leaderboards from the public API
安全使用建议
This skill appears to do what it says (retrieve public Chess.com data) and only needs curl, but it routes requests through a Pipeworx gateway and suggests using npx to install an MCP client. Before installing or using it: 1) Decide if you trust gateway.pipeworx.io to see query data (usernames, requested months, IP address) — if not, prefer a skill that calls api.chess.com directly. 2) Avoid blindly running the provided npx command; inspect the package (mcp-remote) source or use an alternative client you control. 3) If you must use the gateway, verify TLS, read the gateway's privacy/terms, and test with non-sensitive queries first. 4) If you want a lower-risk option, request or implement a version that calls api.chess.com endpoints directly and documents exactly what is transmitted.
功能分析
Type: OpenClaw Skill
Name: pipeworx-chess
Version: 1.0.0
The skill bundle is a documentation-based integration for accessing Chess.com player statistics and leaderboards via a remote MCP gateway (gateway.pipeworx.io). It contains no local executable code, and the instructions in SKILL.md are limited to standard API interactions using curl and npx, with no evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The skill claims to use Chess.com's public API (no auth required) and only needs curl — which is consistent. However, instead of calling api.chess.com directly the SKILL.md examples and MCP config point to gateway.pipeworx.io, which is an extra network hop to a third party not mentioned in the description.
Instruction Scope
Instructions are limited and do not ask the agent to read local files or extra environment variables. The concern is that all example calls go to a Pipeworx gateway; using that gateway will transmit query parameters, usernames, and possibly IP/metadata to a third party. The SKILL.md gives no explanation for why a proxy is used or what the gateway does with query data.
Install Mechanism
There is no install spec (instruction-only), which is low risk. The MCP client config example, however, recommends an npx invocation (npx -y mcp-remote@latest ...) which would fetch and execute code from the npm registry at runtime — this is not required by the skill itself but is presented as a client config and could cause unexpected remote code execution if followed.
Credentials
The skill declares no required environment variables, credentials, or config paths — appropriate for a read-only public-API integration.
Persistence & Privilege
No always:true flag and no special privileges requested. The skill is user-invocable and can be invoked autonomously (default), which is normal and not by itself a red flag.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-chess - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-chess触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx chess 是什么？
Chess.com player profiles, game stats, match archives, and leaderboards from the public API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 88 次。
如何安装 Pipeworx chess？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-chess」即可一键安装，无需额外配置。
Pipeworx chess 是免费的吗？
是的，Pipeworx chess 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx chess 支持哪些平台？
Pipeworx chess 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx chess？
由 Bruce Gutman（@brucegutman）开发并维护，当前版本 v1.0.0。
推荐 Skills