← 返回 Skills 市场
Pipeworx movies
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
76
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-movies
功能描述
Movies MCP — wraps iTunes Search API (movies, free, no auth) and TVmaze API (TV shows, free, no au
安全使用建议
This skill appears to do what it claims (wrap public movie/TV APIs) but the runtime instructions ask the agent to run npx to fetch and execute mcp-remote@latest against gateway.pipeworx.io. That means code will be downloaded and run from the network and can change over time. Before installing: (1) confirm you trust the pipeworx.io gateway and the mcp-remote npm package author; (2) prefer a pinned package version instead of @latest; (3) ensure npx/Node availability is acceptable and explicitly declared; (4) consider reviewing the mcp-remote package source and gateway behavior, or run the skill in a sandboxed environment; (5) note that although no credentials are requested, a malicious remote package could attempt to read or transmit local environment data, so avoid running it with sensitive secrets present.
功能分析
Type: OpenClaw Skill
Name: pipeworx-movies
Version: 1.0.0
The pipeworx-movies skill is a standard Model Context Protocol (MCP) wrapper for movie and TV show search APIs (iTunes and TVmaze). It uses the mcp-remote utility to connect to a hosted gateway at gateway.pipeworx.io, which is a common pattern for remote MCP servers. No malicious code, data exfiltration, or prompt injection attempts were identified in SKILL.md or _meta.json.
能力评估
Purpose & Capability
The skill claims to wrap iTunes Search and TVmaze (both public, no-auth APIs). The provided connect snippet (npx mcp-remote ... gateway.pipeworx.io) is consistent with providing a remote MCP proxy for those APIs. However, the SKILL.md does not declare that the agent needs npx/Node available, which is a mismatch between stated requirements and actual runtime needs.
Instruction Scope
SKILL.md instructs the agent to run npx to download and execute mcp-remote@latest pointed at a remote gateway URL. That means arbitrary code will be fetched from npm and executed locally and the agent will communicate with gateway.pipeworx.io. The instructions do not ask for unrelated local files or secrets, but they do enable remote code execution and outbound network calls, which expands the skill's runtime capabilities beyond a simple API wrapper.
Install Mechanism
There is no formal install spec, but the connect snippet relies on npx to fetch and run mcp-remote@latest from npm at runtime. Download-and-execute via npx (especially using @latest) is a moderate-to-high risk install mechanism because it executes remotely-sourced code whose exact contents can change and whose provenance may be unclear.
Credentials
The skill declares no environment variables, credentials, or config paths and the instructions do not request local secrets. This is proportionate to the claimed purpose (public, no-auth APIs). Note: running external packages may still access environment data if the package is malicious, but no envs are requested by the skill itself.
Persistence & Privilege
always is false and there is no request to modify other skills or system-wide settings. The skill does instruct transient execution of an external package but does not request permanent presence or elevated platform privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-movies - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-movies触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx movies 是什么？
Movies MCP — wraps iTunes Search API (movies, free, no auth) and TVmaze API (TV shows, free, no au. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 76 次。
如何安装 Pipeworx movies？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-movies」即可一键安装，无需额外配置。
Pipeworx movies 是免费的吗？
是的，Pipeworx movies 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx movies 支持哪些平台？
Pipeworx movies 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx movies？
由 Bruce Gutman（@b-gutman）开发并维护，当前版本 v1.0.0。
推荐 Skills