Show My IP
PassAudited by ClawScan on May 1, 2026.
Overview
This skill does what it claims: it runs a small script to query ifconfig.me and print the server’s public IP address.
This appears safe for its stated purpose. Before installing, be aware that using it sends a request to ifconfig.me, which reveals the server’s public IP to that service, and confirm that curl is available in your environment.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
When used, the external IP-check service can observe that this server made a request and can see its public IP address.
The script makes outbound curl requests to ifconfig.me to determine the public IP. This is disclosed and purpose-aligned, but it is still an external network call.
ipv4=$(curl -4 -s --max-time 5 https://ifconfig.me 2>/dev/null)
Use the skill only when it is acceptable to query ifconfig.me from the server; use an approved internal IP-check endpoint if your environment restricts external network diagnostics.
Users have limited publisher/source context, and the skill may fail if curl is unavailable.
The package source/homepage are not identified, and the registry metadata does not declare curl even though SKILL.md lists it as a requirement. The included script is small and readable, so this is a provenance/setup note rather than a security concern.
Source: unknown; Homepage: none; Required binaries (all must exist): none
Review the short included script before installing and ensure curl is available if you plan to use the skill.