ClawHub
Back to skill

Security audit

IP2Location.io

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed read-only IP2Location.io connector skill with no evidence of hidden, destructive, or unrelated behavior.

Before installing, confirm you are comfortable connecting your IP2Location.io API key through OOMOL and installing the oo CLI if needed. The listed connector actions are read-only lookups.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.