← 返回 Skills 市场
Pipeworx holidays
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
78
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-holidays
功能描述
Public holidays for 100+ countries — look up by year, check if today is a holiday, or find the next upcoming ones
安全使用建议
This skill appears to do what it says (holiday lookups) but two issues merit caution: (1) the examples call a pipeworx gateway rather than Nager.Date directly — confirm you trust https://gateway.pipeworx.io and its privacy/usage policy before sending queries; (2) the SKILL.md suggests running `npx -y mcp-remote@latest ...` (not declared in required binaries), which will download and execute code from npm. If you plan to install that, prefer reproducible pinned versions, request a formal install spec, or ask the publisher for source code/a vetted release. If you only need simple queries, consider calling the Nager.Date API directly or request the skill be updated to declare npx in required binaries and to avoid fetching 'latest' at runtime.
功能分析
Type: OpenClaw Skill
Name: pipeworx-holidays
Version: 1.0.0
The skill provides public holiday information by interfacing with a remote Model Context Protocol (MCP) server hosted at gateway.pipeworx.io. It uses standard methods (npx mcp-remote) to connect to the API and provides tools for holiday lookups, which are consistent with its stated purpose in SKILL.md. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
Description says it uses the Nager.Date API for holiday data, but all example calls go to https://gateway.pipeworx.io/holidays/mcp (a proxy/service). That could be legitimate (a proxy to Nager.Date) but is an important mismatch. The declared required binary is only curl, yet the SKILL.md setup uses npx — this is an undeclared runtime requirement.
Instruction Scope
Runtime instructions show POSTing JSON-RPC to the pipeworx gateway and include a 'Setup' snippet that runs npx to fetch mcp-remote@latest, which will download and run code from npm. The skill does not instruct reading local files or environment variables, but the npx step grants the skill the ability to execute remotely fetched code on the host if followed.
Install Mechanism
There is no formal install spec in the registry, but the SKILL.md recommends using npx to install/execute mcp-remote@latest from the public npm registry. npx fetches and runs code at install time (extract=true equivalent) which is higher risk and should have been declared in an install spec and in required binaries.
Credentials
The skill declares no required environment variables or credentials, which is proportionate for a read-only holiday lookup. However, queries are sent to an external gateway (pipeworx.io) rather than directly to Nager.Date, so users should be aware query contents (country/year/date) will be transmitted to that third party.
Persistence & Privilege
The skill is not always-enabled and uses default autonomous invocation; it does not request system-wide config changes or persistent credentials. The main privilege concern is the optional npx install step which could execute code transiently.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-holidays - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-holidays触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx holidays 是什么？
Public holidays for 100+ countries — look up by year, check if today is a holiday, or find the next upcoming ones. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 78 次。
如何安装 Pipeworx holidays？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-holidays」即可一键安装，无需额外配置。
Pipeworx holidays 是免费的吗？
是的，Pipeworx holidays 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx holidays 支持哪些平台？
Pipeworx holidays 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx holidays？
由 Bruce Gutman（@brucegutman）开发并维护，当前版本 v1.0.0。
推荐 Skills