Pipeworx sports

Provides live scores, standings, team and player info across major sports leagues including football, basketball, baseball, and hockey.

Security Scan

The skill mostly does what it says (fetch sports data) but contains a mismatch about who it talks to — it claims TheSportsDB but the runtime example calls a third‑party gateway (gateway.pipeworx.io) with no provenance — this discrepancy and unknown source make it suspicious.

Purpose & Capability

The description says data is provided 'via TheSportsDB', but the SKILL.md's runtime example and embedded mcpServers config point to gateway.pipeworx.io (a third‑party proxy). There is no homepage or source repo to verify that gateway.pipeworx.io is an authorized proxy for TheSportsDB. That mismatch between claimed backend and actual network target is disproportionate and unexplained.

Instruction Scope

The instructions are narrowly scoped to calling the provided JSON‑RPC gateway endpoints and include example curl usage and league/team IDs only. They do not ask the agent to read local files or extra env vars. However, they instruct the agent to send requests to an external, non‑obvious endpoint (gateway.pipeworx.io) rather than directly to TheSportsDB, which could expose query contents to that third party.

Install Mechanism

This is an instruction‑only skill with no install spec and no code files, so nothing is written to disk or installed. That minimizes local installation risk.

Credentials

The skill requests no environment variables or credentials, which is reasonable for simple public sports lookups. That said, the example uses a hardcoded third‑party gateway URL instead of a documented official API endpoint or an instruction to use the user's own API key; absence of an API key requirement is plausible but should be confirmed against TheSportsDB's access model.

Persistence & Privilege

The skill does not request always: true or any elevated persistent privileges, and it will not be force‑included. It also does not declare any ability to modify other skills or agent settings.

What to consider before installing

This skill appears to provide sports data but embeds a third‑party gateway (https://gateway.pipeworx.io) rather than calling TheSportsDB directly and has no visible source or homepage. Before installing, ask the publisher for: (1) the origin/ownership of gateway.pipeworx.io and whether it's an official TheSportsDB proxy, (2) a link to source code or documentation, and (3) whether any user data from queries is logged or retained by that gateway. If you can't verify the gateway, prefer a skill that calls the official API directly (or lets you supply your own API key) to avoid leaking query contents to an unknown third party. Monitor network requests and avoid sending sensitive data through the skill.

Sports

Live scores, standings, team info, and player data across football, basketball, baseball, hockey, and more via TheSportsDB.

Tools at a glance

• search_teams -- Find teams by name. Returns sport, league, country, stadium, description, badge image.
• search_players -- Find players by name. Returns team, nationality, position, bio, thumbnail.
• get_league_table -- Current season standings for any league (wins, draws, losses, goals, points).
• get_last_events -- Last 15 results for a team with scores.
• get_next_events -- Next 15 upcoming fixtures for a team.

Example: Premier League standings

curl -X POST https://gateway.pipeworx.io/sports/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"get_league_table","arguments":{"league_id":"4328","season":"2024-2025"}}}'

Useful league IDs

League	ID
English Premier League	4328
La Liga	4335
Serie A	4332
NBA	4387
NFL	4391
MLB	4424

Useful team IDs

• Arsenal: 133604
• Manchester United: 133612
• Real Madrid: 133738
• LA Lakers: 134867

{
  "mcpServers": {
    "sports": {
      "url": "https://gateway.pipeworx.io/sports/mcp"
    }
  }
}