Pipeworx wikifeed

Provides curated Wikipedia content including historical events on a date, daily featured articles, most read pages, and picture of the day.

Security Scan

The skill's instructions and requirements match its stated purpose, but it fetches Wikipedia content via an opaque third‑party gateway (gateway.pipeworx.io) with no homepage or publisher transparency — this raises privacy/trust concerns.

Purpose & Capability

Name/description (curated Wikipedia content) align with the instructions (HTTP JSON-RPC calls to return on-this-day, featured article, most-read, picture-of-day). However, the skill obtains Wikipedia content through a third-party gateway rather than the official Wikipedia APIs; that is not impossible or necessarily malicious but is a notable deviation from an obvious implementation expectation.

Instruction Scope

SKILL.md only instructs making POST requests to https://gateway.pipeworx.io/wikifeed/mcp with JSON-RPC parameters — it does not request local files, extra environment variables, or other system state. The instruction does direct user data/queries to an external endpoint (the pipeworx gateway), which is expected for a remote service but means queries and arguments could be logged or observed by that operator.

Install Mechanism

No install spec and no code files — lowest-risk form. Nothing is written to disk or installed by the skill itself.

Credentials

No environment variables, credentials, or config paths are requested. The level of access requested is minimal and proportional to the described functionality.

Persistence & Privilege

always is false and the skill does not request persistent or elevated presence. It does not modify other skills or request system configuration access.

Scan Findings in Context

[no_scan_findings] expected: The regex-based scanner found nothing because this is an instruction-only skill with no code files. That absence is expected but provides limited visibility into runtime behavior of the external gateway.

What to consider before installing

This skill appears to do what it says, but it fetches all content through a third-party endpoint (gateway.pipeworx.io) operated by an unknown publisher. Before installing, consider: (1) Do you trust that operator to not log or retain queries? (2) Avoid sending sensitive or private data as part of requests to this skill. (3) Prefer alternatives that call the official Wikipedia APIs (api.wikimedia.org) if you want stronger provenance. If you need higher assurance, ask the publisher for a homepage, privacy/data-retention policy, or source code for the gateway service; absent that, treat outputs as coming from an opaque aggregator.

Wikifeed

Curated content from Wikipedia: historical events, featured articles, trending pages, and the picture of the day.

on_this_day

What happened on March 15th throughout history? Pass a month and day to get historical events, notable births, deaths, and holidays for that date across all years.

featured_article

Wikipedia's daily featured article for any date. Returns the title, extract, description, URL, and original image.

most_read

The most popular Wikipedia articles on any given day, ranked by view count. Great for tracking what the world is curious about.

picture_of_day

Wikipedia's picture of the day with title, description, image URL, and thumbnail.

Example: what happened on July 20?

curl -X POST https://gateway.pipeworx.io/wikifeed/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"on_this_day","arguments":{"month":"07","day":"20"}}}'

(Spoiler: the Moon landing, among other things.)

Example: most-read articles yesterday

curl -X POST https://gateway.pipeworx.io/wikifeed/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"most_read","arguments":{"year":"2025","month":"03","day":"30"}}}'

{
  "mcpServers": {
    "wikifeed": {
      "url": "https://gateway.pipeworx.io/wikifeed/mcp"
    }
  }
}