Pipeworx deckofcards

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 7, 2026, 9:19 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requests and runtime instructions are consistent with a simple remote Deck-of-Cards API client and do not ask for unrelated credentials or risky installs.

This skill appears to do exactly what it claims: call a remote Deck-of-Cards service. Before installing, confirm you trust gateway.pipeworx.io/pipeworx.io (it will receive any request payloads and return card images), and be aware the MCP example would pull mcp-remote from npm if used — so ensure npx/npm usage is acceptable in your environment. If you want tighter safety, limit the agent's network access or review traffic to the gateway to ensure no sensitive data is sent. The small inconsistency about `npx` being referenced but not declared is worth checking with the skill author if you plan to run the MCP helper.