← 返回 Skills 市场
Pipeworx poetry
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
74
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-poetry
功能描述
Poetry MCP — PoetryDB API (free, no auth)
安全使用建议
This pack likely just proxies PoetryDB, but it instructs the agent to run an npx command that downloads and executes code and connects to gateway.pipeworx.io. Before installing: 1) Verify the trustworthiness of the mcp-remote npm package (inspect its source or prefer a pinned version instead of @latest). 2) Verify what gateway.pipeworx.io does with query data (does it just proxy PoetryDB or log/collect requests?). 3) If you can't validate those, avoid running it on sensitive systems — run in a sandbox or restrict network access. 4) Prefer a version that calls PoetryDB directly (or an implementation you can inspect) if you want lower risk.
功能分析
Type: OpenClaw Skill
Name: pipeworx-poetry
Version: 1.0.0
The skill provides access to the PoetryDB API through a remote Model Context Protocol (MCP) gateway. It uses the standard 'mcp-remote' utility via npx to connect to 'https://gateway.pipeworx.io/poetry/mcp'. The configuration in SKILL.md and _meta.json is transparent, aligns with the stated purpose, and contains no evidence of malicious code, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
Name/description say this is a PoetryDB (no-auth) pack which matches the skill's intent to provide poem search/random/author tools. HOWEVER the SKILL.md does not call PoetryDB directly; it points the agent to a Pipeworx gateway (https://gateway.pipeworx.io/poetry/mcp). This is a small mismatch worth verifying (gateway likely proxies PoetryDB but that is not explicit).
Instruction Scope
The SKILL.md instructs the agent to run: npx -y mcp-remote@latest https://gateway.pipeworx.io/poetry/mcp. That causes the agent to fetch and execute code from npm and open a connection to the Pipeworx gateway. The instructions do not ask to read local files or env vars, but they do grant dynamic remote code execution and network access to a third-party endpoint — more capability than a simple direct API curl would require.
Install Mechanism
There is no static install spec, but the runtime relies on npx to pull and run mcp-remote@latest from the npm registry. Using npx/@latest executes unpinned, network-fetched code at runtime (moderate-high risk). The gateway URL is a custom domain rather than a well-known release host; this increases the need to validate the package and gateway before use.
Credentials
The skill declares no required environment variables, credentials, or config paths. That is proportionate to a read-only poetry lookup capability.
Persistence & Privilege
always:false and no install-time files are declared. The skill does not request persistent system privileges or modifications to other skills. Note: autonomous invocation is allowed by default (not flagged alone), so exercising caution when combining with the npx execution behavior is advisable.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-poetry - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-poetry触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx poetry 是什么？
Poetry MCP — PoetryDB API (free, no auth). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 74 次。
如何安装 Pipeworx poetry？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-poetry」即可一键安装，无需额外配置。
Pipeworx poetry 是免费的吗？
是的，Pipeworx poetry 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx poetry 支持哪些平台？
Pipeworx poetry 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx poetry？
由 Bruce Gutman（@brucegutman）开发并维护，当前版本 v1.0.0。
推荐 Skills