← 返回 Skills 市场
Pipeworx launches
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
72
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-launches
功能描述
Launches MCP — wraps Launch Library 2 API (ll.thespacedevs.com, free, no auth)
安全使用建议
Before installing: be aware this skill tells the agent to run 'npx -y mcp-remote@latest' and connect to gateway.pipeworx.io — that downloads and executes code from npm each time. If you trust Pipeworx and the mcp-remote package, this may be acceptable. To reduce risk: ensure 'npx' is available in a controlled environment, ask the author to pin a specific package version (avoid @latest), review the mcp-remote package source on npm/GitHub, and confirm the gateway URL is legitimate. If you cannot verify the package or gateway, avoid installing or restrict the agent's network/execution privileges.
功能分析
Type: OpenClaw Skill
Name: pipeworx-launches
Version: 1.0.0
The skill bundle provides a standard configuration for an MCP (Model Context Protocol) server that wraps the Launch Library 2 API. It uses the 'mcp-remote' utility to connect to a gateway at gateway.pipeworx.io. No malicious code, data exfiltration patterns, or prompt injection attempts were identified in SKILL.md or _meta.json.
能力评估
Purpose & Capability
The skill claims to wrap Launch Library 2 (ll.thespacedevs.com) which is plausible, but the SKILL.md's Connect snippet requires running 'npx' to fetch 'mcp-remote@latest' and connect to https://gateway.pipeworx.io/launches/mcp. The metadata declared no required binaries, yet the runtime clearly depends on 'npx' being present. This mismatch is incoherent and should be fixed or explained.
Instruction Scope
The runtime instructions ask the agent to run a one‑line npx command that will download and execute code from the npm registry and open a network connection to gateway.pipeworx.io. While this is consistent with providing a remote wrapper, it expands the agent's runtime privileges beyond simple API calls (remote code execution and external network communication). There are no instructions to read local files or env vars, but the executed package could perform arbitrary actions.
Install Mechanism
There is no install spec, but the Connect snippet relies on npx to dynamically fetch and run 'mcp-remote@latest'. Fetching the latest package at runtime from npm is a supply‑chain risk (arbitrary code execution, version drift). The source (npm) is a common package host, but using @latest without pinning increases risk; the Connect URL points to a third‑party gateway rather than directly to the Launch Library API.
Credentials
The skill declares no required environment variables or credentials, which aligns with a free/no‑auth wrapper. However, because it executes a downloaded package and connects to a remote gateway, it could exfiltrate data without needing declared credentials. The lack of declared env requirements is not malicious by itself but reduces transparency.
Persistence & Privilege
The skill is not always-enabled and is user-invocable (normal). It does not request persistent system-wide privileges or modification of other skills. The main privilege of concern is runtime code execution via npx, not persistent presence.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-launches - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-launches触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx launches 是什么？
Launches MCP — wraps Launch Library 2 API (ll.thespacedevs.com, free, no auth). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 72 次。
如何安装 Pipeworx launches？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-launches」即可一键安装，无需额外配置。
Pipeworx launches 是免费的吗？
是的，Pipeworx launches 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx launches 支持哪些平台？
Pipeworx launches 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx launches？
由 Bruce Gutman（@brucegutman）开发并维护，当前版本 v1.0.0。
推荐 Skills