Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pipeworx countries

v1.0.0

World country data — search by name, code, region, language, or currency via REST Countries API v3.1

0· 69·0 current·0 all-time
byBruce Gutman@brucegutman

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for brucegutman/pipeworx-countries.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Pipeworx countries" (brucegutman/pipeworx-countries) from ClawHub.
Skill page: https://clawhub.ai/brucegutman/pipeworx-countries
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: curl
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pipeworx-countries

ClawHub CLI

Package manager switcher

npx clawhub@latest install pipeworx-countries
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, and runtime instructions all describe country data lookups via a REST endpoint. Required binary (curl) and the described API usage are consistent with the stated purpose.
Instruction Scope
SKILL.md only instructs making HTTP JSON-RPC calls to https://gateway.pipeworx.io/countries/mcp for the provided tools and does not ask for unrelated files or credentials. However, the example and setup call out a remote MCP gateway, so network traffic (including query payloads) will be sent to a third party — expected for this skill but worth noting for privacy.
!
Install Mechanism
There is no formal install spec, but the Setup section recommends running `npx -y mcp-remote@latest https://gateway.pipeworx.io/countries/mcp`. That will fetch and execute code from npm (mcp-remote@latest) and connect to a third‑party gateway. The skill metadata doesn't declare npx/npm as a required binary, and pulling 'latest' from npm is an execution risk if you haven't audited the package or the gateway.
Credentials
The skill requests no environment variables, credentials, or config paths — which is proportionate to a read-only country data lookup capability.
Persistence & Privilege
always is false and the skill doesn't request persistent or system-wide changes. No special privileges are requested.
What to consider before installing
This skill appears to do what it says (country lookups) and only needs network access to the pipeworx gateway. Before installing or running the optional setup: 1) Understand that queries and any data you send will go to gateway.pipeworx.io — avoid sending sensitive data. 2) If you plan to run the provided `npx mcp-remote@latest ...` command, be aware it downloads and executes code from npm (the 'latest' tag can change) — review the mcp-remote package source or prefer a pinned, audited version. 3) Note the SKILL.md does not declare that npx/npm is required; ensure your environment meets requirements and consider running the skill in a sandbox or isolated environment if you are unsure about trusting the remote package/gateway.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🌐 Clawdis
Binscurl
latestvk970y9bjsypfcpcndntvkjymys84dcsn
69downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

REST Countries

Comprehensive data for every country in the world. Look up population, capital, languages, currencies, flag emoji, and geographic details. Search by name, ISO code, region, spoken language, or currency.

Tools

ToolDescription
search_countriesSearch countries by name (partial matches work)
get_country_by_codeLookup by ISO 3166-1 alpha-2 (e.g., "US") or alpha-3 (e.g., "USA") code
countries_by_regionList all countries in a region: africa, americas, asia, europe, oceania
countries_by_languageCountries where a given language is spoken (e.g., "spanish")
countries_by_currencyCountries using a given currency (e.g., "eur", "usd")

Use cases

  • Building country selector dropdowns with flags and calling codes
  • Answering "what countries speak French?" or "which countries use the Euro?"
  • Enriching location data with population, timezone, and regional info
  • Geographic research comparing countries by area, population density, or income

Example: countries that speak Arabic

curl -s -X POST https://gateway.pipeworx.io/countries/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"countries_by_language","arguments":{"language":"arabic"}}}'

Returns each country's name, capital, region, population, and flag emoji.

Setup

{
  "mcpServers": {
    "pipeworx-countries": {
      "command": "npx",
      "args": ["-y", "mcp-remote@latest", "https://gateway.pipeworx.io/countries/mcp"]
    }
  }
}

Comments

Loading comments...