Pipeworx airports
v1.0.0Airports MCP — wraps AirportGap API (free, no auth required)
⭐ 0· 11·0 current·0 all-time
byBruce Gutman@brucegutman
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Airport data via AirportGap) match the instructions to POST JSON-RPC to https://gateway.pipeworx.io/airports/mcp. Required binaries list only curl, which is sufficient for the provided curl examples. Minor mismatch: the SKILL.md also shows an MCP Client Config that uses `npx mcp-remote@latest` (implying node/npx availability), but the skill's required binaries do not list npx/node.
Instruction Scope
Instructions are narrowly scoped to making JSON-RPC HTTP calls to the specified Pipeworx gateway and listing/calling tools. The doc does not instruct reading local files, environment variables, or accessing unrelated services.
Install Mechanism
This is an instruction-only skill with no install spec or code files — nothing will be written to disk by the skill itself. The only runtime action shown is curl POSTs to the gateway. The MCP client example recommends npx, but that is a user-side suggestion, not an install executed by the skill.
Credentials
No environment variables, credentials, or config paths are requested. The skill's network calls target a single external gateway domain which matches its purpose.
Persistence & Privilege
The skill does not request persistent presence (always is false) and does not ask to modify other skills or system settings.
Assessment
This skill is an instruction-only wrapper that issues HTTP JSON-RPC calls to gateway.pipeworx.io and does not request any credentials. Before installing, confirm you trust the external gateway (https://gateway.pipeworx.io and the listed homepage) because API calls will transmit queries and any user-provided parameters to that host. If you plan to use the MCP Client Config, note it suggests running `npx mcp-remote@latest`—that requires Node/npx and will fetch/execute code from npm at runtime, so add npx/node to required binaries or avoid using npx if you don't trust the package. If you need stronger privacy or higher rate limits, consider signing up at pipeworx.io as the notes indicate. No static scan findings were available because the skill contains only SKILL.md instructions.Like a lobster shell, security has layers — review code before you run it.
latestvk9758d2gmp34c3wh1vmq29k3fx84bnh9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
⚡ Clawdis
Binscurl
