China Phone Checker

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward instruction-only skill that calls a disclosed phone-checking API, with normal privacy and API-key considerations.

Before installing, make sure you are comfortable sending queried Chinese phone numbers to apipick and using an apipick API key that may consume credits. The artifacts do not show hidden code, persistence, or unrelated permissions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If installed and used, the agent can use the configured apipick API key for phone-check requests and consume account credits.

Why it was flagged

The skill uses a provider API key, which gives access to the user's apipick account and may consume credits; this is expected for the integration and is clearly disclosed.

Skill content
Requires an apipick API key (x-api-key).
Recommendation

Use a dedicated apipick key if possible, monitor usage, and avoid sharing the key in chat or files.

What this means

Phone numbers submitted for checking will be sent to apipick for processing.

Why it was flagged

The documented workflow sends the phone number to an external provider endpoint. This is necessary for the skill's purpose and is disclosed, but phone numbers can be personal data.

Skill content
POST https://www.apipick.com/api/check-china-phone ... {"phone_number": "13800138000"}
Recommendation

Only submit phone numbers you are authorized to check, and review apipick's privacy and retention practices if the numbers are sensitive.