Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (IP归属查询) align with required items: python3 runtime and a Juhe API key. The single code file implements exactly an HTTP call to the Juhe IP lookup endpoint and returns the result.
Instruction Scope
SKILL.md instructs installing requests, setting JUHE_API_KEY, and running the script — which matches the code. The script makes an outbound request only to apis.juhe.cn. One security note: the code uses an http:// URL (not HTTPS) and sends the API key as a query parameter, which can expose the key in transit or in server logs; consider switching to HTTPS or using a POST with the key in the body if supported.
Install Mechanism
No install spec (instruction-only) and only an external Python dependency (requests) is suggested in SKILL.md. There are no downloaded/executed archives or third-party installers.
Credentials
The only required environment variable is JUHE_API_KEY (declared as primary), which the skill needs to call the Juhe API. No unrelated credentials, config paths, or secrets are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes or modify other skills' configs. It only performs normal outbound API calls when invoked.
Assessment
This skill appears coherent and limited to Juhe IP lookups. Before installing: (1) only provide a Juhe API key with appropriate scope — do not reuse high-privilege keys; (2) be aware the current code calls the API over HTTP and passes the key in the URL (risk of interception and logging); prefer switching the API_URL to https://apis.juhe.cn/ip/ipNewV3 if supported; (3) ensure the requests library is installed in a controlled environment; (4) if you allow autonomous agent invocation, know the agent can make outbound calls to the Juhe API using your key — restrict that capability if you want tighter control.Like a lobster shell, security has layers — review code before you run it.
latestvk973kvj0khyarwq0wzamdsz62n837k2m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌍 Clawdis
Binspython3
EnvJUHE_API_KEY
Primary envJUHE_API_KEY