← 返回 Skills 市场
Pipeworx onthisday
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
78
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-onthisday
功能描述
On This Day MCP — wraps byabbe.se/on-this-day (free, no auth)
安全使用建议
This skill appears to do what it says (wrap an on-this-day API) but relies on running an npm package from @latest and connecting to a third-party gateway. Before installing, verify the mcp-remote package and the gateway: check mcp-remote's npm page and source repository, prefer a pinned version (not @latest), and confirm the gateway.pipeworx.io operator and privacy practices. If you cannot audit the remote package or trust the gateway, avoid running this on agents with access to sensitive data or run it in a restricted/sandboxed environment. Additional useful information that would raise confidence: a pinned package version or a registry install spec, source repo and maintainer details for mcp-remote, or documentation showing the gateway simply proxies to byabbe.se without collecting extra data.
功能分析
Type: OpenClaw Skill
Name: pipeworx-onthisday
Version: 1.0.0
The skill is a standard MCP (Model Context Protocol) wrapper for a historical events API (byabbe.se). It facilitates connection to a remote gateway at gateway.pipeworx.io using the mcp-remote utility via npx. There is no evidence of malicious intent, data exfiltration, or prompt injection in the SKILL.md or _meta.json files; the behavior is transparent and aligned with its stated purpose.
能力评估
Purpose & Capability
Name and description (wraps byabbe.se/on-this-day) match the declared tools. The SKILL.md provides a single connection method that proxies to gateway.pipeworx.io, which can be a legitimate implementation detail, though the skill does not document how the gateway maps to the claimed backend.
Instruction Scope
The instructions tell the agent to run an npx command that will fetch and execute code (mcp-remote) and connect to https://gateway.pipeworx.io/onthisday/mcp. The SKILL.md does not describe what mcp-remote does, what data it sends/receives, or what the gateway expects — giving the package broad discretion to run arbitrary code and exchange data with a third-party server.
Install Mechanism
There is no install spec in the registry, but the connect snippet instructs use of npx -y mcp-remote@latest. Fetching @latest at runtime is a dynamic download/execute pattern (npm registry) and therefore a moderate-to-high risk compared with an instruction-only skill or a pinned, audited release.
Credentials
The skill requests no environment variables, credentials, or config paths in the manifest. That is proportionate to the stated purpose. However, because the remote client/gateway are external and opaque, they could still request or relay sensitive data at runtime.
Persistence & Privilege
always:false and no special OS/config access — normal. Autonomous invocation is allowed by default; combined with dynamic code execution and an external gateway, this increases the blast radius if the remote package or gateway are malicious, but autonomous invocation alone is not a problem.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-onthisday - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-onthisday触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx onthisday 是什么？
On This Day MCP — wraps byabbe.se/on-this-day (free, no auth). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 78 次。
如何安装 Pipeworx onthisday？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-onthisday」即可一键安装，无需额外配置。
Pipeworx onthisday 是免费的吗？
是的，Pipeworx onthisday 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx onthisday 支持哪些平台？
Pipeworx onthisday 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx onthisday？
由 Bruce Gutman（@brucegutman）开发并维护，当前版本 v1.0.0。
推荐 Skills