Pipeworx flood

River discharge and flood forecasts for any location — up to 92 days ahead via Open-Meteo

This skill forwards user-supplied coordinates to a third-party gateway (gateway.pipeworx.io) and the docs suggest using 'npx mcp-remote@latest' which would download and run code from npm at runtime — neither of which is clearly declared in the metadata. Before installing: (1) confirm you trust pipeworx.io and review its privacy/publishing policy (what it logs/retains); (2) ask the publisher why Open‑Meteo calls are proxied and request direct Open‑Meteo endpoints or transparency about the gateway's behavior; (3) note that Node/npx is implicitly required — avoid running npx mcp-remote unless you can inspect the package source or run in a sandbox; (4) do not send sensitive or private location coordinates until you verify the gateway's data handling; (5) if you prefer, implement direct calls to Open‑Meteo yourself using curl to avoid third‑party proxies.

Type: OpenClaw Skill Name: pipeworx-flood Version: 1.0.0 The skill bundle provides river discharge and flood forecast data via the Open-Meteo API. It utilizes a remote MCP server configuration (gateway.pipeworx.io) and standard tools (curl, npx) to fetch environmental data. No indicators of data exfiltration, malicious execution, or prompt injection were found in SKILL.md or _meta.json.