← 返回 Skills 市场
Pipeworx patents
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
84
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-patents
功能描述
Patents MCP — wraps PatentsView API (https://api.patentsview.org/)
安全使用建议
This skill appears to do what it says (wrap PatentsView) but it instructs the agent to run 'npx -y mcp-remote@latest' and connect to https://gateway.pipeworx.io/patents/mcp. That means code will be downloaded and executed from npm and queries (and any agent context) will go to an external server. Before installing: (1) confirm you trust pipeworx.io and the gateway URL; (2) prefer a pinned package version (not @latest) or review the mcp-remote package source on npm/GitHub; (3) ensure Node/npx are available and include them in the skill metadata; (4) avoid sending sensitive data to the connector, or test in a sandbox; (5) if you need stronger guarantees, ask the publisher for a local-only connector or source you can audit. If you cannot verify the remote package and endpoint, treat this skill as risky.
功能分析
Type: OpenClaw Skill
Name: pipeworx-patents
Version: 1.0.0
The skill bundle provides a standard configuration for an MCP (Model Context Protocol) server that wraps the PatentsView API. It uses the 'mcp-remote' utility to connect to a remote gateway at gateway.pipeworx.io, which is consistent with its stated purpose of providing patent search tools. No malicious code, data exfiltration logic, or harmful prompt instructions were found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
Name and description (Patents MCP wrapping PatentsView) align with the declared tools. However, the SKILL.md requires running 'npx mcp-remote@latest' to connect to https://gateway.pipeworx.io/patents/mcp, yet the skill metadata declares no required binaries. The missing declaration for Node/npm/npx is an incoherence.
Instruction Scope
Instructions are short and focused on establishing an MCP connection, but they direct the agent to run npx which will execute code it downloads. That execution and the subsequent connection to gateway.pipeworx.io will send queries (and likely any context the agent includes) to that external server — the SKILL.md does not describe what is transmitted or any privacy/usage guarantees.
Install Mechanism
There is no formal install spec, but the connect snippet uses 'npx -y mcp-remote@latest', which downloads and executes the latest package from the public npm registry at runtime. Unpinned '@latest' installs are higher risk because the code executed can change over time; executing remote npm packages without review is a moderate-to-high risk behavior.
Credentials
The skill declares no environment variables or credentials, which is reasonable for a public PatentsView wrapper. However, it fails to declare required runtime tooling (Node/npx). Also, because the agent will connect to an external gateway, any context or user data sent to that gateway should be considered sensitive unless the endpoint's behavior is verified.
Persistence & Privilege
The skill does not request always:true and follows normal autonomous-invocation defaults. Still, allowing the agent to autonomously run 'npx' and execute downloaded code increases blast radius — autonomous invocation combined with remote code execution is riskier than a purely local/instruction-only skill.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-patents - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-patents触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx patents 是什么？
Patents MCP — wraps PatentsView API (https://api.patentsview.org/). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 84 次。
如何安装 Pipeworx patents？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-patents」即可一键安装，无需额外配置。
Pipeworx patents 是免费的吗？
是的，Pipeworx patents 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx patents 支持哪些平台？
Pipeworx patents 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx patents？
由 Bruce Gutman（@brucegutman）开发并维护，当前版本 v1.0.0。
推荐 Skills