Pipeworx disease

COVID-19 statistics — global totals, per-country breakdowns, historical trends, and vaccination data from disease.sh

Security Scan

The skill's requests and runtime instructions are consistent with a COVID-19 stats fetcher that calls a remote API, but it references executing remote code (npx mcp-remote) and a third‑party gateway which you should trust before use.

Purpose & Capability

Name/description match the actions: the SKILL.md instructs the agent to query a remote disease data service (disease.sh via a pipeworx gateway) and exposes country/global/historical/vaccine tools. The single required binary (curl) is reasonable for calling the remote endpoint.

Instruction Scope

Instructions stay within the purpose (fetch COVID statistics). They show example JSON-RPC calls to https://gateway.pipeworx.io/disease/mcp and provide an MCP config. They do not ask the agent to read local files or unrelated environment variables. However, the MCP config suggests using `npx -y mcp-remote@latest`, which would download and run code from npm if used — this is not declared as a required binary and expands runtime behavior beyond plain HTTP calls.

Install Mechanism

No install spec and no code files — lowest-risk deployment model. The only runtime network activity shown is HTTP POSTs to a named gateway and an optional npx invocation in the MCP config. There are no archive downloads or custom install URLs in the skill itself.

Credentials

The skill requests no environment variables, credentials, or config paths. That is proportionate for a read-only stats-fetching integration.

Persistence & Privilege

always is false and the skill does not request persistent or cross-skill configuration. It does not ask to modify other skills or system-wide settings.

Assessment

This skill appears coherent for fetching COVID-19 data, but it relies on a third‑party gateway (gateway.pipeworx.io) and the MCP config references running `npx mcp-remote@latest` which would download and execute code from npm. Before installing, confirm you trust pipeworx.io and the gateway endpoint, and be aware that any data you send to those endpoints (including parameters and possibly parts of the conversation, depending on invocation) will go to that external service. If you want to avoid running remote npm code, do not execute the MCP npx command and prefer direct HTTP calls (curl) to a trusted API endpoint.

COVID-19 Statistics

Real-time and historical COVID-19 data from disease.sh. Pull global totals, per-country stats, time-series trends, and vaccination numbers. Data is aggregated from Johns Hopkins, Worldometers, and government sources.

Tools

Tool	Description
get_global_stats	Current global totals: cases, deaths, recovered, active, tests
get_country_stats	Stats for a specific country by name or ISO code (e.g., "USA", "germany", "gb")
get_historical	Time-series data for cases, deaths, and recovered over N days
get_vaccine_stats	Vaccination totals — global or per country

Use cases

• Answering questions about COVID-19 statistics for a specific country
• Charting pandemic trends over time
• Comparing vaccination rates across countries
• Historical research on pandemic impact

Example: Germany's COVID stats

curl -s -X POST https://gateway.pipeworx.io/disease/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"get_country_stats","arguments":{"country":"germany"}}}'

MCP config

{
  "mcpServers": {
    "pipeworx-disease": {
      "command": "npx",
      "args": ["-y", "mcp-remote@latest", "https://gateway.pipeworx.io/disease/mcp"]
    }
  }
}