Maxmind Geoip2
v1.0.2MaxMind GeoIP2 integration. Manage data, records, and automate workflows. Use when the user wants to interact with MaxMind GeoIP2 data.
⭐ 0· 105·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions: all actions are performed via the Membrane CLI to interact with MaxMind GeoIP2. The skill does not request unrelated credentials, binaries, or config paths.
Instruction Scope
SKILL.md only instructs installing/running the Membrane CLI, authenticating via Membrane, creating a connection, listing actions, running actions, and optionally sending proxied requests to the MaxMind API via Membrane. It does not instruct reading local files, scanning system config, or exfiltrating unrelated data.
Install Mechanism
The skill is instruction-only (no install spec), but it tells users to run 'npm install -g @membranehq/cli' and uses 'npx @membranehq/cli@latest'. Installing a global npm package is a normal, moderate-risk action — verify the package identity/version and prefer pinned versions or npx for ephemeral use.
Credentials
The skill declares no required env vars or credentials. It requires a Membrane account and an authenticated connection to MaxMind (handled by Membrane). This is proportionate to the stated purpose, though it means Membrane will hold/proxy the MaxMind credentials on the user's behalf.
Persistence & Privilege
always:false and no install hooks are present. The skill does not request elevated or persistent agent-wide privileges. Note: autonomous invocation is permitted (platform default) which would allow the agent to call Membrane actions if the user has configured connections.
Assessment
This skill is coherent and uses Membrane as an intermediary to access MaxMind GeoIP2. Before using it: (1) verify the Membrane CLI package (@membranehq/cli) and prefer using npx or pin a specific published version rather than a floating `@latest` or an unverified global install; (2) understand that you'll authenticate a Membrane connection which allows Membrane to store/manage MaxMind credentials and proxy requests — review what access you grant during connection/consent; (3) in automated/agent runs be aware the agent may invoke Membrane actions autonomously if you allow it; (4) if you need stronger assurance, inspect Membrane's documentation and the @membranehq/cli repository before installation.Like a lobster shell, security has layers — review code before you run it.
latestvk972qfw8dkdnfayap7fegr5zph842j3v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.