← 返回 Skills 市场
Pipeworx numbersapi
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
66
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-numbersapi
功能描述
NumbersAPI MCP — wraps numbersapi.com (free, no auth)
安全使用建议
This skill instructs the agent to run `npx mcp-remote@latest` and connect to https://gateway.pipeworx.io — meaning it will download and execute code from the npm registry and communicate with an external service. Before installing, consider: 1) Require the publisher to pin a specific mcp-remote version (avoid @latest) and provide the package source or a checksum so you can audit it. 2) Ask for the `npx`/Node prerequisite to be declared. 3) Verify what data the gateway receives and whether traffic is encrypted and logged. 4) If you cannot audit the remote package or trust the gateway, run the skill only in a tightly sandboxed environment or decline installation.
功能分析
Type: OpenClaw Skill
Name: pipeworx-numbersapi
Version: 1.0.0
The skill is a standard MCP (Model Context Protocol) wrapper for the NumbersAPI, facilitating access to number-related facts. It utilizes 'npx' to execute 'mcp-remote' and connects to a remote gateway at 'https://gateway.pipeworx.io/numbersapi/mcp'. No malicious logic, data exfiltration, or prompt injection attempts were identified in the SKILL.md or _meta.json files.
能力评估
Purpose & Capability
The skill claims to wrap numbersapi.com, which is consistent with the listed tools (number_fact, date_fact, math_fact, random_fact). However, the SKILL.md instructs the agent to run `npx mcp-remote@latest https://gateway.pipeworx.io/numbersapi/mcp` while the registry metadata lists no required binaries or install steps. Declaring no required binaries is inconsistent with an instruction that requires `npx`/Node.
Instruction Scope
The runtime instructions will cause the agent to download and execute a remote npm package (mcp-remote@latest) and connect to an external MCP gateway (gateway.pipeworx.io). That can result in arbitrary code execution and network traffic to an endpoint outside the described API (numbersapi.com). The SKILL.md does not describe what data will be sent to the gateway or whether the remote code is sandboxed.
Install Mechanism
There is no formal install spec, but the connect block relies on `npx` to fetch `mcp-remote@latest` from the public npm registry at runtime. Using `@latest` means arbitrary new code can be executed later; runtime download/exec from an external registry is a higher-risk install mechanism and is not made explicit in the metadata.
Credentials
The skill declares no environment variables, credentials, or config paths, and its stated purpose does not require secrets. The lack of declared credentials is proportionate, but the SKILL.md still initiates a network connection to an external gateway which could receive context or data.
Persistence & Privilege
always is false and autonomous invocation is allowed (the platform default). The skill does not request permanent presence or system-wide configuration changes. No additional persistence or elevated privileges are declared.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-numbersapi - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-numbersapi触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx numbersapi 是什么？
NumbersAPI MCP — wraps numbersapi.com (free, no auth). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 66 次。
如何安装 Pipeworx numbersapi？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-numbersapi」即可一键安装，无需额外配置。
Pipeworx numbersapi 是免费的吗？
是的，Pipeworx numbersapi 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx numbersapi 支持哪些平台？
Pipeworx numbersapi 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx numbersapi？
由 Bruce Gutman（@b-gutman）开发并维护，当前版本 v1.0.0。
推荐 Skills