Pipeworx dictionary

Word definitions, phonetics, usage examples, synonyms, and antonyms from the Free Dictionary API

Security Scan

The skill mostly matches a simple dictionary lookup (uses curl to call a remote API) but the SKILL.md includes an MCP / npx usage example that would download and run remote code without declaring it — an unexplained step that warrants caution.

Purpose & Capability

The name/description claim a dictionary lookup via the Free Dictionary API, and the provided curl example aligns with that. However the MCP config in SKILL.md instructs using `npx mcp-remote@latest` to connect to https://gateway.pipeworx.io/dictionary/mcp; that step is not explained or declared in the registry metadata (which only lists curl), and it introduces remote package execution that is not obviously required for a simple dictionary lookup.

Instruction Scope

The runtime instructions themselves are limited to POSTing to the pipeworx gateway and returning dictionary data (no file reads or env access). But the included MCP config explicitly calls out running `npx ... mcp-remote@latest`, which downloads and executes code from the npm registry when used — expanding the agent's actions beyond simple HTTP requests. That behavior is not described in the skill's purpose and grants the ability to execute arbitrary package code if followed.

Install Mechanism

There is no formal install spec (instruction-only), which is low-risk. The concern is the MCP example: it relies on npx to fetch and run a remote package at runtime. Although not an explicit install in the registry, using npx effectively installs/executes remote code and is a higher-risk operation that wasn't declared in required binaries.

Credentials

The skill requests no environment variables, no credentials, and no config paths — appropriate for a public dictionary API and consistent with the described functionality.

Persistence & Privilege

always:false and no requested persistent privileges. The skill can be invoked autonomously (normal platform default) but it does not request elevated or persistent system presence.

What to consider before installing

This skill is largely what it says: a thin wrapper for a dictionary API using curl. The part to watch is the MCP config example which invokes `npx mcp-remote@latest` — running that will download and execute code from npm (remote package execution). If you plan to use the skill, avoid running the npx/mcp-remote step unless you trust gateway.pipeworx.io and the mcp-remote package. Ask the publisher for a source repository or a signed release, or run the MCP/npx step in a sandboxed environment. Otherwise, using the plain curl HTTP call shown in the example is proportionate and does not request any secrets.

Dictionary

Look up any English word and get definitions organized by part of speech, phonetic transcription, audio pronunciation URLs, usage examples, synonyms, and antonyms. Powered by the Free Dictionary API.

Tools

• define_word — Full definitions with phonetics, parts of speech, and example sentences
• get_synonyms — Synonyms and antonyms extracted from dictionary entries

Reach for this when

• A user asks "what does 'ephemeral' mean?"
• Building a vocabulary quiz or flashcard application
• Need synonyms for writing assistance or paraphrasing
• Want phonetic pronunciation data for a language learning tool

Example

curl -s -X POST https://gateway.pipeworx.io/dictionary/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"define_word","arguments":{"word":"serendipity"}}}'

Returns definitions grouped by part of speech, with example usage and audio URLs.

MCP config

{
  "mcpServers": {
    "pipeworx-dictionary": {
      "command": "npx",
      "args": ["-y", "mcp-remote@latest", "https://gateway.pipeworx.io/dictionary/mcp"]
    }
  }
}