ip-locator

自动获取 IP 地址的归属地信息。支持查询任意 IP 或当前公网 IP。使用 ip-api.com 免费服务，无需 API 密钥。当用户需要查询 IP 位置、网络信息、归属地时触发此技能。

Security Scan

This skill appears to do what it says—query ip-api.com for IP geolocation—and its files are straightforward, but note a few minor inconsistencies and privacy/network considerations before installing.

Purpose & Capability

The skill's purpose (IP geolocation via ip-api.com) matches the included scripts and documentation. However, the package declares no required binaries while the script uses curl and python3 for formatting; those runtime dependencies are expected but not declared.

Instruction Scope

SKILL.md and the script limit actions to calling ip-api.com and formatting the response. They do not read other files or environment variables. Important privacy note: when run with no arguments the script will query the current public IP, sending that IP to ip-api.com. The script uses plain HTTP (http://ip-api.com) by default, which may expose queries to network interception—this is a documented limitation of the free service.

Install Mechanism

There is no install specification (instruction-only plus a utility script). No downloads from third-party URLs or archive extraction are performed. The only file that will be executed is the included script.

Credentials

The skill requests no credentials or config paths, which is appropriate. It nevertheless performs outbound network requests to ip-api.com and will transmit queried IP addresses (including the host's public IP). Also, it relies on curl and python3 at runtime even though no env/binary requirements are declared.

Persistence & Privilege

The skill does not request persistent or elevated privileges, is not always-enabled, and does not modify other skills or system-wide settings.

Assessment

This skill is a simple IP geolocation helper that contacts ip-api.com. Before installing or running it: (1) be aware that queries (including your machine's public IP if you run it without arguments) are sent to a third party; (2) the script uses HTTP (not HTTPS) by default—this can be intercepted on the network—so avoid sending sensitive data and consider switching to a secure endpoint if available; (3) ensure curl and python3 are available on the host (they are used but not declared); (4) respect the API rate limits (60/min, 4500/day) and don't use it for bulk automated queries without upgrading to a paid plan; and (5) review the script yourself or run it in an isolated environment if you are concerned about network calls.

IP 归属地查询技能

何时使用

✅ 使用场景：

• "查询这个 IP 的归属地"
• "我的公网 IP 是多少？在哪里？"
• "192.168.1.1 是哪个国家的？"
• "帮我看看这个 IP 的详细信息"
• 网络安全分析、日志排查

❌ 不使用场景：

• 内网 IP 定位（内网 IP 无地理位置）
• 需要精确到街道级别的位置
• 商业用途（免费版有速率限制）
• 批量查询大量 IP（需购买付费 API）

快速命令

查询当前公网 IP

curl -s "ip-api.com/json/?fields=61439"

查询指定 IP

curl -s "ip-api.com/json/8.8.8.8?fields=61439"

简洁输出（仅国家 + 城市）

curl -s "ip-api.com/json/8.8.8.8?fields=country,city"

脚本使用

# 查询指定 IP
./scripts/ip-lookup.sh 8.8.8.8

# 查询当前公网 IP
./scripts/ip-lookup.sh

# 批量查询
./scripts/ip-lookup.sh 8.8.8.8 1.1.1.1 208.67.222.222

API 字段说明

fields=61439 包含以下信息：

• status — 查询状态
• country — 国家
• countryCode — 国家代码
• region — 省/州
• regionName — 省/州全名
• city — 城市
• zip — 邮编
• lat — 纬度
• lon — 经度
• timezone — 时区
• isp — 网络服务提供商
• org — 组织
• as — AS 号
• query — 查询的 IP

输出示例

{
  "status": "success",
  "country": "美国",
  "countryCode": "US",
  "region": "CA",
  "regionName": "California",
  "city": "Mountain View",
  "zip": "94035",
  "lat": 37.386,
  "lon": -122.0838,
  "timezone": "America/Los_Angeles",
  "isp": "Google LLC",
  "org": "Public DNS",
  "as": "AS15169 Google LLC",
  "query": "8.8.8.8"
}

注意事项

• ⚠️ 免费版限制：每分钟 60 次查询，每天 4500 次
• ⚠️ 内网 IP（如 192.168.x.x）无法定位
• ⚠️ 位置信息是估算值，非精确位置
• ✅ 无需 API 密钥
• ✅ 支持 IPv4 和 IPv6
• ✅ 商业使用需购买付费版

相关资源

• 详细字段说明：见 references/fields.md
• API 文档：https://ip-api.com/docs/