ClawHub
Back to skill

Security audit

Ip Geo Location Skill

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed IP geolocation helper that sends public IP lookups to a fixed external MCP endpoint and does not show hidden persistence, credential use, or destructive behavior.

Install only if you are comfortable sending public IP addresses, and IPs resolved from domains you ask about, to ip.api4claw.com over HTTPS. Avoid using it for sensitive internal network data; the included script blocks common private and reserved ranges, but privacy-sensitive users may still prefer a self-hosted or first-party geolocation source.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Tp4

High
Category
MCP Tool Poisoning
Confidence
98% confidence
Finding
The declared purpose says this skill provides IP geolocation lookup, including location and ASN-related queries for IPs. However, the supplied code only uses Node's DNS resolver to fetch IPv4/IPv6 records for a domain name. Its primary purpose is domain resolution, which is materially different from geolocating an IP address. There is no evidence of geolocation database/API access, ASN lookup, or country/city mapping. Therefore the description does not accurately represent the actual behavior.

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill performs network-capable actions via an external MCP endpoint and DNS resolution, but it declares no explicit tool scope such as permissions or allowed-tools. That weakens policy enforcement and reviewability, making it easier for the skill to gain or retain broader execution capability than intended and increasing the chance of unintended outbound requests or future abuse.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill documentation explicitly directs IP lookups to a third-party HTTPS endpoint, which necessarily transmits user-supplied IP addresses off-platform. IP addresses can be personal data or sensitive operational data, and the reference does not include any user-facing disclosure, consent guidance, or data-handling notice, creating a real privacy risk rather than a purely theoretical one.

Description-Behavior Mismatch

Medium
Confidence
95% confidence
Finding
The skill manifest describes an IP geolocation lookup capability for determining location/ASN information about IP addresses. This script instead accepts a domain name and performs DNS A/AAAA resolution to produce IPs, which is a distinct network lookup behavior not described in the manifest.

Static analysis

No suspicious patterns detected.