Pipeworx swapi

Search Star Wars characters, planets, starships, and films with detailed attributes from the original six movies via the Star Wars API.

Security Scan

The skill is internally consistent: it documents using a Pipeworx gateway to query Star Wars data, requires no credentials or installs, and its instructions stay within that scope.

Purpose & Capability

The name/description say it queries Star Wars data and the SKILL.md shows only API calls to a gateway exposing people/planet/starship/film tools — this aligns with the stated purpose. Note: the gateway used (gateway.pipeworx.io) is a third-party host rather than the well-known swapi.dev endpoint; that is a choice but not inconsistent with the skill's purpose.

Instruction Scope

Instructions are limited to calling the external MCP JSON-RPC endpoint and describing the available tool calls. The SKILL.md does not instruct the agent to read local files, environment variables, or other unrelated system state.

Install Mechanism

There is no install spec and no code files; the skill is instruction-only, so nothing is downloaded or written to disk.

Credentials

The skill declares no required environment variables, credentials, or config paths. Nothing in the instructions requires secrets or elevated access.

Persistence & Privilege

always is false and the skill does not request persistent presence or elevated privileges. Autonomous invocation is allowed (platform default) but is not combined with other risky capabilities.

Scan Findings in Context

[no_code_files_to_scan] expected: The static scanner had no code to analyze because this is an instruction-only skill; that is expected for a text-only integration.

Assessment

This skill appears to do exactly what it says, but calls a third-party gateway (https://gateway.pipeworx.io/swapi/mcp) rather than the official swapi.dev host. Before installing, confirm you trust that external endpoint: avoid sending any sensitive data or credentials through the skill, test it with non-sensitive queries, inspect the gateway's TLS certificate and response behavior, and prefer the official API or a known provider if you require stronger provenance or privacy guarantees.

Star Wars API

A long time ago in a galaxy far, far away... all the data from the Star Wars universe became available via MCP.

Search for characters, look up planets, inspect starships, and get film details from the original six films.

Tools

search_people -- Search characters by name. Try "Luke", "Darth", or "Leia". Returns physical attributes, birth year, gender, and homeworld.

get_planet -- Planet by ID. Tatooine is 1. Returns climate, terrain, population, gravity, orbital data.

get_starship -- Starship by ID. The Millennium Falcon is 10, Death Star is 9. Returns model, manufacturer, crew capacity, cargo, hyperdrive rating, and speed.

get_film -- Film by ID. A New Hope is 1. Returns title, episode number, director, producer, release date, and the full opening crawl.

Example: look up Tatooine

curl -X POST https://gateway.pipeworx.io/swapi/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"get_planet","arguments":{"id":1}}}'

Quick reference

Thing	ID
Luke Skywalker	search "Luke"
Tatooine	Planet 1
Millennium Falcon	Starship 10
Death Star	Starship 9
A New Hope	Film 1
The Empire Strikes Back	Film 2

{
  "mcpServers": {
    "swapi": {
      "url": "https://gateway.pipeworx.io/swapi/mcp"
    }
  }
}