Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pipeworx wikifeed

v1.0.0

Provides curated Wikipedia content including historical events on a date, daily featured articles, most read pages, and picture of the day.

0· 58·0 current·0 all-time
byBruce Gutman@brucegutman

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for brucegutman/pipeworx-wikifeed.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Pipeworx wikifeed" (brucegutman/pipeworx-wikifeed) from ClawHub.
Skill page: https://clawhub.ai/brucegutman/pipeworx-wikifeed
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pipeworx-wikifeed

ClawHub CLI

Package manager switcher

npx clawhub@latest install pipeworx-wikifeed
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (curated Wikipedia content) align with the instructions (HTTP JSON-RPC calls to return on-this-day, featured article, most-read, picture-of-day). However, the skill obtains Wikipedia content through a third-party gateway rather than the official Wikipedia APIs; that is not impossible or necessarily malicious but is a notable deviation from an obvious implementation expectation.
Instruction Scope
SKILL.md only instructs making POST requests to https://gateway.pipeworx.io/wikifeed/mcp with JSON-RPC parameters — it does not request local files, extra environment variables, or other system state. The instruction does direct user data/queries to an external endpoint (the pipeworx gateway), which is expected for a remote service but means queries and arguments could be logged or observed by that operator.
Install Mechanism
No install spec and no code files — lowest-risk form. Nothing is written to disk or installed by the skill itself.
Credentials
No environment variables, credentials, or config paths are requested. The level of access requested is minimal and proportional to the described functionality.
Persistence & Privilege
always is false and the skill does not request persistent or elevated presence. It does not modify other skills or request system configuration access.
Scan Findings in Context
[no_scan_findings] expected: The regex-based scanner found nothing because this is an instruction-only skill with no code files. That absence is expected but provides limited visibility into runtime behavior of the external gateway.
What to consider before installing
This skill appears to do what it says, but it fetches all content through a third-party endpoint (gateway.pipeworx.io) operated by an unknown publisher. Before installing, consider: (1) Do you trust that operator to not log or retain queries? (2) Avoid sending sensitive or private data as part of requests to this skill. (3) Prefer alternatives that call the official Wikipedia APIs (api.wikimedia.org) if you want stronger provenance. If you need higher assurance, ask the publisher for a homepage, privacy/data-retention policy, or source code for the gateway service; absent that, treat outputs as coming from an opaque aggregator.

Like a lobster shell, security has layers — review code before you run it.

latestvk977xxpecj1ejhrdwcwg3rvrg584zsb8
58downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Wikifeed

Curated content from Wikipedia: historical events, featured articles, trending pages, and the picture of the day.

on_this_day

What happened on March 15th throughout history? Pass a month and day to get historical events, notable births, deaths, and holidays for that date across all years.

featured_article

Wikipedia's daily featured article for any date. Returns the title, extract, description, URL, and original image.

most_read

The most popular Wikipedia articles on any given day, ranked by view count. Great for tracking what the world is curious about.

picture_of_day

Wikipedia's picture of the day with title, description, image URL, and thumbnail.

Example: what happened on July 20?

curl -X POST https://gateway.pipeworx.io/wikifeed/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"on_this_day","arguments":{"month":"07","day":"20"}}}'

(Spoiler: the Moon landing, among other things.)

Example: most-read articles yesterday

curl -X POST https://gateway.pipeworx.io/wikifeed/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"most_read","arguments":{"year":"2025","month":"03","day":"30"}}}'
{
  "mcpServers": {
    "wikifeed": {
      "url": "https://gateway.pipeworx.io/wikifeed/mcp"
    }
  }
}

Comments

Loading comments...