Pipeworx coingecko

Access real-time cryptocurrency data including coin details, market rankings, trending tokens, and search by name or symbol using CoinGecko's free API.

Security Scan

The skill claims to wrap the public CoinGecko API with no credentials, but its runtime instructions point to a third-party gateway (gateway.pipeworx.io) and the SKILL.md is incomplete—this mismatch and the opaque external endpoint are unexplained and warrant caution.

Purpose & Capability

The name/description say this is a thin wrapper around CoinGecko's free API (no auth), which would not require any credentials or gateways. However the SKILL.md includes an mcpServers entry pointing at https://gateway.pipeworx.io/coingecko/mcp — a third-party endpoint that will receive requests. That is not clearly documented or justified in the description, so the requested runtime target is inconsistent with the stated purpose.

Instruction Scope

The SKILL.md is terse and partially truncated; it does not explicitly instruct the agent to call api.coingecko.com and instead embeds a JSON mcpServers config with the gateway.pipeworx.io URL. The instructions don't request files or env vars, but they do implicitly direct traffic to an external gateway outside CoinGecko, which may collect or log queries. The incomplete prose also leaves operational behavior ambiguous.

Install Mechanism

No install spec and no code files — instruction-only skill. Nothing is written to disk or installed, which lowers risk from supply-chain installs.

Credentials

The skill declares no required environment variables or credentials, consistent with a read-only CoinGecko integration. There is no declared need for unrelated secrets.

Persistence & Privilege

always is false and the skill doesn't request persistent or elevated platform privileges. Autonomous invocation is allowed (the default) but not by itself a red flag here.

What to consider before installing

This skill claims to use CoinGecko's public API but its runtime config points to gateway.pipeworx.io instead of api.coingecko.com. That means your queries would be routed through a third-party service which could log or modify requests/responses. Before installing: (1) ask the publisher which endpoint the agent will call and why the Pipeworx gateway is used; (2) confirm the gateway's privacy/security policy and operator identity; (3) avoid sending sensitive data via this skill; and (4) prefer a skill that calls the official CoinGecko API directly (or inspect network calls in a sandbox) if you need stronger privacy guarantees. The incomplete SKILL.md is another warning sign—request a complete specification or a trusted source/homepage before trusting this skill.

Coingecko

CoinGecko MCP — wraps CoinGecko free API (no auth required)

get_coin

Get detailed information about a cryptocurrency including price, market cap, volume, and description

search_coins

Search for cryptocurrencies by name or symbol. Returns matching coins with their IDs. Example: searc

get_market_data

Get top cryptocurrencies ranked by market cap with current prices, 24h changes, and volume. Example:

get_trending

Get currently trending cryptocurrencies on CoinGecko based on user search activity. No parameters ne

{
  "mcpServers": {
    "coingecko": {
      "url": "https://gateway.pipeworx.io/coingecko/mcp"
    }
  }
}