← 返回 Skills 市场
Pipeworx mhw
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
68
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-mhw
功能描述
MHW MCP — Monster Hunter World data (mhw-db.com, free, no auth)
安全使用建议
This skill likely does what it says (fetch MHW data), but the runtime step executes a remote npm package via npx and connects to gateway.pipeworx.io — that can run arbitrary code and network requests. Before installing: 1) Confirm you have/allow 'npx' and understand that it will fetch 'mcp-remote@latest'; 2) Prefer a pinned package version and a verifiable checksum or an explicit install spec rather than 'latest'; 3) Review the mcp-remote package source or ask the author to provide a vendored/package-managed install; 4) If you proceed, run it in a restricted/sandboxed environment and avoid supplying any secrets. If the publisher can explain why 'npx' wasn't listed in required binaries and can provide a pinned, reproducible install, the risk would be much lower.
功能分析
Type: OpenClaw Skill
Name: pipeworx-mhw
Version: 1.0.0
The skill utilizes 'npx -y mcp-remote@latest' to connect to a remote gateway (gateway.pipeworx.io), which effectively executes remote code and proxies tool calls to an external third-party service. While this behavior is consistent with the stated purpose of a remote MCP server for Monster Hunter World data, the reliance on an external endpoint and the execution of unpinned remote packages via npx introduce significant supply chain and data privacy risks.
能力评估
Purpose & Capability
Stated purpose is to provide MHW data (mhw-db). That capability can legitimately use a remote connector, but the skill declares no required binaries or install steps while the instructions rely on 'npx' and a remote package — an inconsistency.
Instruction Scope
SKILL.md tells the agent to run 'npx -y mcp-remote@latest https://gateway.pipeworx.io/mhw/mcp', which will download and execute code and contact an external gateway. This goes beyond simply fetching public API data and gives broad runtime discretion to execute remote package code.
Install Mechanism
There is no formal install spec, yet the instructions rely on npx to pull 'mcp-remote@latest' from npm at runtime. Unpinned, dynamic installs from npm introduce supply-chain risk; the absence of an explicit requirement for 'npx' is also an incoherence.
Credentials
The skill declares no environment variables or credentials and the described data source is public, so requested secrets would be disproportionate. No hidden env access was observed in SKILL.md.
Persistence & Privilege
always is false and the skill does not request permanent presence or modify other skills. Autonomous invocation is allowed (default) but not combined with other high privileges here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-mhw - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-mhw触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx mhw 是什么？
MHW MCP — Monster Hunter World data (mhw-db.com, free, no auth). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 68 次。
如何安装 Pipeworx mhw？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-mhw」即可一键安装，无需额外配置。
Pipeworx mhw 是免费的吗？
是的，Pipeworx mhw 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx mhw 支持哪些平台？
Pipeworx mhw 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx mhw？
由 Bruce Gutman（@b-gutman）开发并维护，当前版本 v1.0.0。
推荐 Skills