IP Geo Location - IP归属地查询
v1.0.0IP地址归属地查询。查询指定IPv4地址的归属信息,包括国家、省份、城市、运营商(ISP)。使用场景:用户说"查一下这个IP"、"这个IP是哪里的"、"帮我查IP归属地"、"XX.XX.XX.XX是哪个城市"、"这个IP是什么运营商"、"批量查询这些IP"等。通过聚合数据(juhe.cn)API实时查询,支持单个...
⭐ 0· 101·0 current·0 all-time
byjuhe-skills@juhemcp
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (IP归属地查询) matches required artifacts: a Python script, python3 runtime, and a single JUHE_IP_KEY. All requested resources are necessary for the stated purpose.
Instruction Scope
SKILL.md and the script stay within scope: extract IPv4s, skip private addresses, call juhe.cn API, and format results. The script reads JUHE_IP_KEY from env, a local scripts/.env, or CLI — it does not touch other system files. Minor inconsistency: SKILL.md contains two different daily free-call numbers (500 vs 50) but this is informational, not a scope breach.
Install Mechanism
No install spec; instruction-only plus a small Python script is low-risk. Nothing is downloaded or executed from external URLs by the installer.
Credentials
Only JUHE_IP_KEY is required, which is appropriate for a third‑party API integration. The script only reads a local .env in its own directory and the environment variable; no other credentials or config paths are requested.
Persistence & Privilege
always is false and the skill does not request permanent system presence or modify other skills/settings. It runs on demand and uses standard I/O/networking only.
Assessment
This skill appears to do exactly what it says: query juhe.cn for IPv4 geolocation using the JUHE_IP_KEY you supply. Before installing or using it, consider: 1) The script sends your API key and queried IPs to apis.juhe.cn — only use a key you trust to share with that provider. 2) The script currently uses an HTTP API URL constant (script sets API_URL to http://apis.juhe.cn...), which could expose the key in transit; prefer to use HTTPS (https://apis.juhe.cn/...) if supported. 3) Confirm the actual free-call quota with juhe.cn (SKILL.md shows both 500 and 50 in different places). 4) If you plan to query many IPs or sensitive addresses, review provider privacy and billing. If you want to be extra cautious, run the script locally after setting JUHE_IP_KEY rather than giving the key to a third party or shared environment.Like a lobster shell, security has layers — review code before you run it.
latestvk970j4s5h6byg441f65xbjysgn83jk9n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌐 Clawdis
Binspython3
EnvJUHE_IP_KEY
Primary envJUHE_IP_KEY
