← 返回 Skills 市场
Pipeworx citybikes
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
84
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-citybikes
功能描述
Real-time bike-sharing station data for 600+ networks worldwide — Citi Bike, Velib, Nextbike, and more
安全使用建议
This skill appears to do what it says (query bike-share data), but note two issues before installing: (1) SKILL.md instructs using 'npx mcp-remote@latest' (which downloads and runs code from npm) but the skill metadata only lists 'curl' as a required binary — if you allow the agent to follow that setup it will fetch remote code at runtime. (2) The agent will send JSON-RPC requests to https://gateway.pipeworx.io; ensure you trust that endpoint because it receives whatever parameters the agent sends. If you plan to install or enable this skill, ask the author to (a) explicitly list Node/npx as a dependency or provide an install spec, and (b) explain what 'mcp-remote' does and why runtime npm execution is necessary. If you cannot verify the upstream package, avoid running npx commands that pull latest code automatically.
功能分析
Type: OpenClaw Skill
Name: pipeworx-citybikes
Version: 1.0.0
The skill provides access to real-time bike-sharing data through a remote MCP server. It uses standard tools like curl and npx to interact with a documented API endpoint (gateway.pipeworx.io) and contains no evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The skill claims to provide real-time bike-share data and the example CURL JSON-RPC call to gateway.pipeworx.io aligns with that purpose. However, the SKILL.md's suggested setup uses 'npx mcp-remote@latest' (Node/npx and an npm package) even though the declared required binaries list only 'curl' and no Node/npx. The missing Node/npx requirement is an incoherence.
Instruction Scope
Instructions are largely scoped to querying pipeworx.io (expected). They do not request local files or extra env variables. However, the example uses a JSON-RPC 'tools/call' method on a remote gateway — this means the agent will send potentially arbitrary method names/params to an external service. That is expected for a remote API but worth noting as it grants the remote endpoint flexibility over what is executed server-side.
Install Mechanism
There is no formal install spec, but the SKILL.md recommends using 'npx -y mcp-remote@latest' which will download and execute code from the npm registry at runtime. The skill metadata does not declare this runtime dependency. Downloading/executing remote packages via npx is higher risk and should be explicit in the skill metadata or install spec.
Credentials
The skill does not request any environment variables, credentials, or config paths. This is proportionate to its stated purpose of querying a public API.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes. It does suggest configuring an mcpServer entry, but that is a local configuration suggestion and not an elevated privilege request.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install pipeworx-citybikes - 安装完成后,直接呼叫该 Skill 的名称或使用
/pipeworx-citybikes触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx citybikes 是什么?
Real-time bike-sharing station data for 600+ networks worldwide — Citi Bike, Velib, Nextbike, and more. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 84 次。
如何安装 Pipeworx citybikes?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-citybikes」即可一键安装,无需额外配置。
Pipeworx citybikes 是免费的吗?
是的,Pipeworx citybikes 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Pipeworx citybikes 支持哪些平台?
Pipeworx citybikes 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Pipeworx citybikes?
由 Bruce Gutman(@brucegutman)开发并维护,当前版本 v1.0.0。
推荐 Skills