China Phone Checker

Validate Chinese mobile phone numbers using the apipick China Phone Checker API. Returns carrier (China Mobile/Telecom/Unicom), province, city, zip code, and...

Security Scan

This instruction-only skill is internally consistent: it needs a single apipick API key and simply issues POST requests to apipick.com to validate Chinese phone numbers — there are no unrelated credentials, installs, or hidden behaviors in the package.

Purpose & Capability

The skill name/description match the declared requirements and instructions. The only required credential is APIPICK_API_KEY (primaryEnv), which is exactly what the apipick API requires. No unrelated binaries, config paths, or credentials are requested.

Instruction Scope

SKILL.md explicitly directs the agent to POST a phone_number to https://www.apipick.com/api/check-china-phone and use the x-api-key header sourced from $APIPICK_API_KEY (or ask the user for it). The instructions do not reference other files, system paths, or additional environment variables. Note: using the skill sends phone numbers to apipick.com (expected behavior for this task).

Install Mechanism

No install spec or code is included (instruction-only). Nothing is downloaded or written to disk by the skill package itself, which minimizes installation risk.

Credentials

Only APIPICK_API_KEY is required, which is proportionate and justified by the skill's purpose. No other SECRET/TOKEN/PASSWORD env vars are requested.

Persistence & Privilege

always is false (default). The skill does not request permanent/system-wide presence or modify other skills' configs. It can be invoked by the agent (normal behavior) but has no elevated privileges.

Assessment

This skill appears to do exactly what it says: it will send phone numbers you supply to apipick.com and return carrier/geographic info. Before installing or using: (1) confirm you trust apipick.com and review their privacy/terms because phone numbers are personal data; (2) provide a dedicated API key (do not paste broader credentials) and monitor credit/usage since each request costs credits; (3) avoid submitting phone numbers you don’t have consent to share; (4) if the API key is accidentally exposed, revoke/rotate it in apipick’s dashboard. Otherwise the skill’s requirements and instructions are proportionate and coherent.

apipick China Phone Checker

Validate Chinese mobile numbers and retrieve carrier and geographic data.

Endpoint

POST https://www.apipick.com/api/check-china-phone

Authentication: x-api-key: YOUR_API_KEY header required. Get a free API key at https://www.apipick.com/dashboard/api-keys

Request

{"phone_number": "13800138000"}

Supported formats: 13800138000 / [phone] / 008613800138000

Response

{
  "success": true,
  "data": {
    "phone": "13800138000",
    "phone_type": "China Mobile",
    "province": "Beijing",
    "city": "Beijing",
    "zip_code": "100000",
    "area_code": "010"
  }
}

phone_type values: China Mobile, China Telecom, China Unicom

Error Codes

Code	Meaning
400	Invalid phone number format
401	Missing or invalid API key
402	Insufficient credits
500	Server error

Cost: 1 credit per request

Usage Pattern

1. Use $APIPICK_API_KEY env var as the x-api-key header value; if not set, ask the user for their apipick API key
2. Make the POST request with the phone number
3. Present carrier and geographic results clearly

See references/api_reference.md for full response field descriptions.