ClawHub

IP Lookup Tool

v1.0.0

查询当前公网 IP、城市位置（含中文名）和运营商。当用户问“我的 IP 是多少”“我现在的 IP 地址”“我在哪个城市上网”这类问题时使用。优先返回公网出口 IP，而不是局域网 IP。

⭐ 0· 54·0 current·0 all-time
by@daguniang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the implementation: the script queries public IP geolocation endpoints, normalizes results, and formats human/JSON output. Required capabilities (none) are proportional to the stated purpose.
ℹ
Instruction Scope
SKILL.md specifies using one unauthenticated IP API (falling back to alternatives). The script follows that priority for IP providers but may perform an additional HTTP request to OpenStreetMap Nominatim (reverse geocoding) when coordinates exist to produce a Chinese city name. That extra external request contradicts the SKILL.md line '只做一次 HTTP 请求' (only do one HTTP request) and means an additional third-party endpoint sees the caller's IP.
✓
Install Mechanism
No install spec or external downloads; this is an instruction-only skill with an included Node.js script. No installers, archives, or third-party packages are pulled during install.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. There are no disproportionate credential requests.
✓
Persistence & Privilege
The skill is not always-enabled and does not request persistent/privileged presence or modify other skills or system settings.
Assessment
This skill appears to do only what it claims: query public IP/geolocation services and optionally reverse-geocode coordinates to Chinese place names. Installing and running it will make outbound HTTPS requests to third-party services (ipinfo.io, ifconfig.co, api.ip.sb, and OpenStreetMap Nominatim), which will see your public IP and any request metadata (User-Agent). If you are concerned about privacy or leaking your IP to additional endpoints, do not install or modify the script to disable reverse geocoding. Note the minor inconsistency: SKILL.md says 'only one HTTP request' but the script may make a second request to Nominatim for cityZh. If you want stricter behavior, remove or gate the reverseGeocodeZh call and/or add a configurable flag. No credentials are requested and there are no install-time downloads, so the technical risk is low, but be aware of rate limits and third-party data sharing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97005dr2zgj1h7qvyt7p1hbbn84fet9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments