← 返回 Skills 市场
Pipeworx nationalize
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
65
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-nationalize
功能描述
Nationalize MCP — nationality prediction from first name (nationalize.io, free, no auth)
安全使用建议
This skill appears to be a thin connector to Pipeworx's Nationalize MCP and will run 'npx -y mcp-remote@latest' to connect to https://gateway.pipeworx.io/nationalize/mcp. Before installing, confirm you are comfortable with: (1) the agent requiring npx/Node on the host (the metadata doesn't list this), (2) the agent downloading and executing a remote npm package (using @latest is a supply‑chain risk), and (3) any names or personal data you send being transmitted to and processed by an external server (check privacy/retention). If you need tighter security, ask the author to: declare npx as a required binary, pin a specific package version instead of @latest, and document what data is sent/retained by the gateway. Run first in a sandboxed environment if you want to observe behavior.
功能分析
Type: OpenClaw Skill
Name: pipeworx-nationalize
Version: 1.0.0
The skill is a standard wrapper for a remote MCP server hosted at gateway.pipeworx.io, designed to predict nationality from names via the nationalize.io API. It utilizes 'npx mcp-remote' to connect to the external service, which is a common pattern for remote MCP integration. No evidence of malicious intent, data exfiltration, or prompt injection was found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
The description (nationality prediction via nationalize/pipeworx) aligns with the connect snippet which points to a Pipeworx gateway. However the registry metadata said 'required binaries: none' while the SKILL.md explicitly invokes 'npx' — a discrepancy between declared requirements and actual runtime behavior.
Instruction Scope
Instructions only show a connect block that runs 'npx -y mcp-remote@latest https://gateway.pipeworx.io/nationalize/mcp'. That implies the agent will execute remote code and send inputs (names) to an external endpoint. The instructions do not ask to read local files or other environment variables, but they also do not state how input data is handled by the remote service (privacy/retention).
Install Mechanism
There is no install spec, but the connect snippet uses 'npx' to fetch and run 'mcp-remote@latest' from the npm registry. Using npx/@latest means downloading and executing code from the network at runtime (supply-chain risk). The remote gateway (gateway.pipeworx.io) is an external domain — not an obvious red flag, but the combination (remote npm package + external gateway) increases risk compared with an instruction-only HTTP call to a known API.
Credentials
The skill requests no credentials or environment variables, which is proportionate for an unauthenticated public API. The only omission is that the SKILL.md expects 'npx' to be available but the metadata did not declare it as a required binary.
Persistence & Privilege
always is false and there are no install scripts or files, so the skill does not request persistent elevated privileges or automatic always-on presence. It does, however, enable remote code execution via npx when invoked.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-nationalize - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-nationalize触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx nationalize 是什么？
Nationalize MCP — nationality prediction from first name (nationalize.io, free, no auth). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 65 次。
如何安装 Pipeworx nationalize？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-nationalize」即可一键安装，无需额外配置。
Pipeworx nationalize 是免费的吗？
是的，Pipeworx nationalize 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx nationalize 支持哪些平台？
Pipeworx nationalize 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx nationalize？
由 Bruce Gutman（@b-gutman）开发并维护，当前版本 v1.0.0。
推荐 Skills