ClawHub

Pipeworx iconify

v1.0.0

Search 200,000+ open-source icons across 150+ collections — Material Design, Font Awesome, Heroicons, Lucide, and more

⭐ 0· 62·0 current·0 all-time
byBruce Gutman@brucegutman
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the actions in SKILL.md (search icons, retrieve SVG). The only required runtime binary is curl, which is sufficient for the provided example requests.
ℹ
Instruction Scope
The instructions tell the agent to POST JSON-RPC requests to https://gateway.pipeworx.io/iconify/mcp to call tools like search_icons/get_icons/list_collections — this is appropriate for an icon search service. One minor mismatch: the MCP config example references using 'npx' to run mcp-remote, but 'npx' is not listed in the declared required binaries; this is an optional configuration snippet rather than a mandatory runtime action.
✓
Install Mechanism
No install spec or code is included; the skill is instruction-only and does not write code to disk. Network requests go to a domain matching the skill's homepage (pipeworx.io).
✓
Credentials
The skill requests no environment variables or credentials. The only data sent is search parameters and icon requests to the Pipeworx gateway, which is consistent with the described functionality.
✓
Persistence & Privilege
The skill is not marked always:true and does not request elevated or persistent system privileges. Autonomous invocation is allowed (default) but is not combined with other concerning factors.
Assessment
This skill simply issues network requests to the Pipeworx icon gateway to search and fetch SVGs — that matches its description. Before installing, confirm you trust gateway.pipeworx.io (the service will receive your search queries and any requested icon data). If you plan to use the MCP config example, note it runs 'npx mcp-remote@latest' which will fetch and execute a package from the npm registry; only run that if you trust the source. No credentials are requested by this skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk9728a5j0hh2ftdtvd4nbh4mfh84fyp7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔣 Clawdis
Binscurl

Comments