ip lookup ( get ip )

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: get-ip Version: 1.0.2 The skill is designed to fetch and display public IP address and geolocation information, which is clearly aligned with its stated purpose. The `SKILL.md` instructions guide the agent to use standard `curl` commands against reputable IP lookup services (e.g., `myip.ipip.net`, `api.ipify.org`, `ipinfo.io`) and do not contain any prompt injection attempts to deviate from this purpose. The `get_ip.sh` script implements this functionality safely, using `curl` with timeouts and parsing JSON output via a hardcoded Python script, without any signs of data exfiltration, malicious execution, or persistence mechanisms. The `scripts/package_skill.py` file is a benign utility for packaging the skill.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent will make outbound web requests to determine and display the current public IP/location.

Why it was flagged

The skill directs the agent to run curl commands. This is expected for an IP lookup skill and is limited to listed lookup services.

Skill content
Run this command to get your public IP and location:

```bash
curl -s myip.ipip.net
```
Recommendation

Use it only for IP or location lookup requests, and be aware that the listed services will receive the request.

What this means

A third-party service may receive the runtime public IP address, and the agent may display approximate location and ISP/org details.

Why it was flagged

The detailed lookup sends the detected public IP to a third-party geolocation provider and returns location/ISP information.

Skill content
curl -s https://ipinfo.io/$(curl -s https://api.ipify.org)/json
Recommendation

Only invoke the skill when the user wants this lookup; prefer HTTPS endpoints where available.