Pipeworx country-state-city

Provides country, state, and city data including ISO codes, capitals, phone codes, currencies, and regions via Pipeworx CountryStateCity API.

Security Scan

The skill's declared purpose (country/state/city lookup) matches its instructions and requirements; it requests no unusual permissions or credentials and is instruction-only, so nothing appears disproportionate.

Purpose & Capability

Name/description say it wraps a CountryStateCity API and the SKILL.md provides an MCP server URL to a Pipeworx gateway that serves that data. The skill does not request unrelated binaries, credentials, or config paths, so required capabilities align with the stated purpose.

Instruction Scope

SKILL.md defines three simple operations (list_countries, get_states, get_cities) and provides the MCP server URL. It does not instruct reading local files, environment variables, or other system state. The document is short and has truncated lines (incomplete sentences), but that is a documentation quality issue, not a security mismatch.

Install Mechanism

There is no install spec and no code files (instruction-only). That minimizes on-disk execution risk — nothing is downloaded or installed by the skill itself.

Credentials

The skill declares no environment variables or credentials. This is proportionate for a read-only lookup service. One caveat: the SKILL.md does not state whether the Pipeworx gateway requires an API key; if an API key is needed, it should be declared. As-is, there are no extraneous secret requests.

Persistence & Privilege

always is false and the skill does not request persistent system-level changes. The skill can be invoked autonomously (platform default), which is expected for skills of this type.

Assessment

This skill appears coherent and low-risk for its stated purpose, but you should still: 1) Verify the external endpoint (https://gateway.pipeworx.io/country-state-city/mcp) and its operator — ensure you trust where queries will be sent. 2) Confirm whether the gateway requires an API key or other credentials (none are declared); if it does, ask the author why that credential isn't listed. 3) Note the SKILL.md is truncated/incomplete — ask the publisher for full documentation or a homepage/source to vet. 4) If you handle sensitive user data, consider testing in a sandbox and monitor network traffic to confirm only expected lookup queries are sent.

Country State City

CountryStateCity MCP — wraps CountryStateCity API (api.countrystatecity.in/v1)

list_countries

List all countries with ISO codes, capitals, phone codes, currencies, and regions. Returns ~250 coun

get_states

Get all states or provinces for a country by ISO2 code (e.g., "US", "IN", "BR"). Returns state names

get_cities

Get cities for a country, optionally filtered by state. Pass country_code (e.g., "US") and optionall

{
  "mcpServers": {
    "country-state-city": {
      "url": "https://gateway.pipeworx.io/country-state-city/mcp"
    }
  }
}