Pipeworx dogsapi

Detailed dog breed encyclopedia — weight ranges, life spans, temperament, and breed groups from dogapi.dog

Security Scan

The skill's stated purpose (dog-breed lookup) is plausible, but the runtime instructions encourage fetching and executing remote npm code via npx (and reference editing MCP config) while the skill metadata does not declare Node/npx or any install — this mismatch and the implicit remote-code execution are concerning.

Purpose & Capability

Name/description match the provided curl examples that call https://gateway.pipeworx.io/dogsapi/mcp for breed data. However, the SKILL.md also shows an MCP config that runs 'npx ... mcp-remote@latest', which implies Node/npx is required — yet required binaries list only includes curl. That is an internal inconsistency (missing declared dependency).

Instruction Scope

The instructions show direct curl POSTs to the pipeworx gateway (expected). They also recommend running an npx-installed 'mcp-remote@latest' against the gateway, which instructs the agent to download and execute code from npm at runtime. The SKILL.md does not limit or explain what that remote package does, nor does it declare Node/npx as required.

Install Mechanism

No install spec is provided, but the MCP example uses 'npx ... mcp-remote@latest' (npm registry, @latest tag). That is effectively a runtime remote-code download and execution. The absence of a pinned package version, provenance information, or a declared dependency on Node makes this higher risk and disproportionate to a simple breed-info skill.

Credentials

The skill declares no required environment variables or config paths and the example curl calls do not request secrets. Requesting no credentials is proportionate to a read-only breed encyclopedia.

Persistence & Privilege

always:false and normal autonomous invocation are fine. The SKILL.md's MCP config suggests the agent/user would add an mcpServers entry (modifying agent config) and run npx to connect — this implies changing agent configuration and running remote code, but the skill does not request persistent privileges itself.

What to consider before installing

This skill appears to deliver dog-breed data, which is reasonable, but there are two things you should verify before installing or running it: (1) the SKILL.md suggests using 'npx mcp-remote@latest <url>' — that will download and execute code from the npm registry at runtime. Ask the publisher what mcp-remote does, why a remote package is needed, and request a pinned version (not @latest) or source repository for review. (2) Node/npx are not listed as required binaries even though the instructions use them; confirm whether Node will be used and whether you are comfortable allowing runtime npm installs. If you prefer lower risk, use the curl examples directly to call https://gateway.pipeworx.io/dogsapi/mcp, or ask the author to provide a clear install spec (trusted release host, pinned versions) and to declare all required binaries and any config changes.

Dogs API — Breed Encyclopedia

A structured database of dog breeds with detailed attributes: weight ranges, life spans, hypoallergenic status, temperament descriptions, and breed group classifications. Also includes random dog facts.

Tools

• list_breeds — Paginated list of breeds with weight, life span, and hypoallergenic flag
• get_breed — Full details for a specific breed by ID
• list_facts — Random dog facts (default 10, max 100)
• get_groups — All breed groups (Sporting, Herding, Terrier, etc.)

Use cases

• "Is a Poodle hypoallergenic?" — look up the breed and check the flag
• Building a breed comparison tool for prospective dog owners
• Enriching a pet adoption platform with breed data
• Fun facts for a pet-themed chatbot or newsletter

Example: browse breeds

curl -s -X POST https://gateway.pipeworx.io/dogsapi/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_breeds","arguments":{"page":1}}}'

MCP config

{
  "mcpServers": {
    "pipeworx-dogsapi": {
      "command": "npx",
      "args": ["-y", "mcp-remote@latest", "https://gateway.pipeworx.io/dogsapi/mcp"]
    }
  }
}