Pipeworx gamedeals

PC game deals from 30+ stores — search sales, compare prices, and track cheapest-ever prices via CheapShark

Security Scan

The skill's functionality (searching game deals via a Pipeworx gateway) matches its description, but the SKILL.md includes an MCP config that would fetch and run remote npm code (npx mcp-remote@latest) even though the skill metadata does not declare node/npx — this mismatch and the potential for remote code execution merit caution.

Purpose & Capability

The skill description (CheapShark / game deals) aligns with the curl-based example that POSTs to the pipeworx gateway. However, the provided MCP config uses 'npx' (node/npm) to fetch mcp-remote@latest but the manifest only declares curl as a required binary — a minor inconsistency in declared runtime requirements.

Instruction Scope

Runtime instructions are narrowly scoped to querying the Pipeworx gateway (gateway.pipeworx.io) for deal/search operations, which is expected. The MCP config snippet, however, instructs installing/running remote code via npx, which would execute code fetched from npm and may broaden the agent's actions beyond simple HTTP requests.

Install Mechanism

There is no formal install spec (instruction-only), which is low risk. But the MCP config suggests using 'npx -y mcp-remote@latest', i.e., downloading and running code from the npm registry — a higher-risk install pattern if followed. The skill itself does not perform that install, but its documentation encourages it.

Credentials

The skill requests no environment variables, no credentials, and no config paths. Its external network calls are limited to the named gateway, which is proportionate to a web-API-backed deals lookup.

Persistence & Privilege

The skill is not always-enabled and is user-invocable; it does not request persistent system presence or elevated privileges.

What to consider before installing

This skill appears to do what it says (query a Pipeworx gateway for CheapShark game deals) and requires only curl. Be cautious about the MCP config: it suggests running 'npx -y mcp-remote@latest', which would download and execute code from npm. If you or your agent will use that MCP setup, verify and trust the pipeworx gateway and the mcp-remote package (review its source and maintainers). If you don't plan to run npx/mcp-remote, the skill can be used via the curl example without granting extra privileges. Also consider whether you want the agent to send user queries to an external service (gateway.pipeworx.io) before enabling autonomous invocation.

Game Deals (CheapShark)

Find the best PC game deals across 30+ digital storefronts including Steam, GOG, Humble Bundle, and Epic. Search by title, filter by price range, sort by savings percentage, and compare prices across stores for any game.

Tools

Tool	Description
search_deals	Search current deals with filters: title, max/min price, store, sort order
search_games	Search games by title and see the cheapest current price across all stores
get_game_details	Price history and current deals across all stores for a specific game
list_stores	All supported digital storefronts with IDs

When to use

• "What are the best game deals under $5 right now?"
• Checking if a specific game is on sale anywhere
• Comparing prices across Steam, GOG, and other stores
• Building a game deal alert system

Example: deals under $5 sorted by savings

curl -s -X POST https://gateway.pipeworx.io/gamedeals/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"search_deals","arguments":{"upperPrice":5,"sortBy":"Savings","limit":5}}}'

MCP config

{
  "mcpServers": {
    "pipeworx-gamedeals": {
      "command": "npx",
      "args": ["-y", "mcp-remote@latest", "https://gateway.pipeworx.io/gamedeals/mcp"]
    }
  }
}