← 返回 Skills 市场
Pipeworx github
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
88
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-github
功能描述
Search GitHub repos, view issues, and look up user profiles via the public REST API — no token required
安全使用建议
This skill routes queries through https://gateway.pipeworx.io rather than calling api.github.com directly. That means your search queries and any agent-provided context will be sent to that third party. The SKILL.md also suggests using `npx mcp-remote@latest`, which would fetch and run code from npm at runtime. Before installing: (1) confirm you trust gateway.pipeworx.io and review its privacy/security policy, (2) avoid sending any sensitive or private context when invoking this skill, (3) if you prefer to avoid third‑party proxies, use a skill or direct curl calls to api.github.com (or configure your own proxy) instead, and (4) if you must use the npx approach, consider auditing or vendoring the mcp client rather than running it directly from npm.
功能分析
Type: OpenClaw Skill
Name: pipeworx-github
Version: 1.0.0
The skill facilitates GitHub searches by routing all requests through a third-party remote gateway (gateway.pipeworx.io) and requires the execution of an external package via 'npx -y mcp-remote@latest'. While the stated functionality is benign, the reliance on a remote proxy for public API access and the use of npx to fetch/execute remote code introduces unnecessary supply chain risks and potential data exposure to the pipeworx.io infrastructure (SKILL.md).
能力评估
Purpose & Capability
Name/description say it uses the public GitHub REST API with no token; however the examples and MCP config show all calls being proxied through https://gateway.pipeworx.io/github/mcp. That gateway is not mentioned in the top-level description and is functionally required for the provided usage pattern.
Instruction Scope
SKILL.md instructs the agent to POST JSON-RPC to a third‑party endpoint and to configure an MCP remote via npx. That means user queries and any context the agent includes will be sent to pipeline.pipeworx.io (third party), which is broader than 'use public GitHub API' and not documented as an external dependency in the manifest.
Install Mechanism
There is no install spec in the registry (instruction-only), but SKILL.md recommends invoking npx mcp-remote@latest. Using npx pulls and runs code from the npm registry at runtime — a networked supply-chain action that can execute arbitrary code if used. No files are written by the registry install itself.
Credentials
The skill requests no environment variables or credentials, which is consistent with 'public data only'. However, because requests are proxied through a third party, absence of declared credentials does not prevent sensitive context from being transmitted to that third party.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or config path access. Autonomous invocation is allowed (platform default); combined with the third‑party gateway this increases the potential blast radius but is not itself an explicit privilege escalation in the manifest.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-github - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-github触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx github 是什么？
Search GitHub repos, view issues, and look up user profiles via the public REST API — no token required. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 88 次。
如何安装 Pipeworx github？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-github」即可一键安装，无需额外配置。
Pipeworx github 是免费的吗？
是的，Pipeworx github 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx github 支持哪些平台？
Pipeworx github 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx github？
由 Bruce Gutman（@b-gutman）开发并维护，当前版本 v1.0.0。
推荐 Skills