← 返回 Skills 市场
Pipeworx pokemon
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
88
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-pokemon
功能描述
Pokemon MCP — wraps PokéAPI (free, no auth required)
安全使用建议
This skill appears to be a lightweight wrapper for PokéAPI, but the runtime instructions tell the agent to run 'npx -y mcp-remote@latest' and connect to https://gateway.pipeworx.io/pokemon/mcp. Running npx with @latest downloads and executes remote npm code on your agent — treat that like running arbitrary software. Before installing or allowing autonomous use, consider:
- Only proceed if you trust the package author and pipeworx gateway. Verify the 'mcp-remote' npm package and its source repository (avoid @latest; prefer a pinned version and checksum).
- Understand data flow: queries will go through gateway.pipeworx.io, not directly to PokéAPI; confirm whether query data or logs are retained by that service.
- If you want lower risk, call the public PokéAPI directly from the agent (no npx), or run the connector inside an isolated environment (container/sandbox) you control.
- Ask the skill author to: declare the npx dependency in metadata, pin the package version (and provide integrity info), or provide source code instead of relying on npx @latest.
Given the dynamic code execution and external gateway, this skill is coherent with its purpose but warrants caution.
功能分析
Type: OpenClaw Skill
Name: pipeworx-pokemon
Version: 1.0.0
The skill is a standard wrapper for the PokéAPI, utilizing the `mcp-remote` tool to connect to a remote gateway at `https://gateway.pipeworx.io/pokemon/mcp`. The configuration and instructions in SKILL.md are consistent with its stated purpose and do not contain any malicious patterns, data exfiltration attempts, or prompt injection risks.
能力评估
Purpose & Capability
The declared purpose (wraps PokéAPI) matches the tool names and the Pipeworx pack homepage. However the SKILL.md omits a required runtime dependency: it instructs the agent to run 'npx', which is not declared in the skill metadata. That omission reduces transparency.
Instruction Scope
The SKILL.md instructs usage of 'npx -y mcp-remote@latest https://gateway.pipeworx.io/pokemon/mcp'. This will (a) download and execute third‑party code on the agent runtime, and (b) open a connection to gateway.pipeworx.io rather than calling the public PokéAPI directly. The doc does not explain what data is sent to the gateway or whether queries are proxied or logged.
Install Mechanism
There is no formal install spec, but the instructions rely on npx to fetch and run mcp-remote@latest. Using npx with @latest means dynamic code execution of a package pulled from the npm registry at runtime — this is equivalent to downloading and running remote code and is a higher-risk install pattern. No package version lock or integrity check is provided.
Credentials
The skill declares no required environment variables, credentials, or config paths. That is proportionate to a read-only wrapper around PokéAPI; there is no direct request for secrets or unrelated credentials.
Persistence & Privilege
The skill is not set to always:true and does not request any persistent system-wide changes in SKILL.md. It appears to be user-invokable only and does not claim to modify other skills or agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-pokemon - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-pokemon触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx pokemon 是什么？
Pokemon MCP — wraps PokéAPI (free, no auth required). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 88 次。
如何安装 Pipeworx pokemon？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-pokemon」即可一键安装，无需额外配置。
Pipeworx pokemon 是免费的吗？
是的，Pipeworx pokemon 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx pokemon 支持哪些平台？
Pipeworx pokemon 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx pokemon？
由 Bruce Gutman（@brucegutman）开发并维护，当前版本 v1.0.0。
推荐 Skills