ip-query
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it claims: it checks the device’s public IP address using disclosed public web APIs, with minor dependency and provenance notes.
Before installing, be aware that IP lookup necessarily contacts third-party services that can observe your public IP address. The artifacts otherwise look consistent with the stated purpose; for smoother installation, confirm curl is available and prefer a package source you trust.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill shares your public IP address and request time with services such as ipinfo.io, api.ipify.org, icanhazip.com, ifconfig.me, or ipecho.net.
The script performs outbound HTTP requests to third-party IP lookup services. This is central to the skill’s purpose and is disclosed, but users should know these providers can see the query.
curl -s --connect-timeout 10 "https://ipinfo.io/json"
Use the skill only when you are comfortable querying third-party IP lookup services; maintainers should keep the endpoint list clearly documented.
Users have less external provenance information to verify the skill, and installation tooling may not warn them that curl is needed.
The package has limited provenance information and does not declare required binaries in metadata, even though the included script checks for curl at runtime.
Source: unknown; Homepage: none; Required binaries (all must exist): none
Prefer installing from a trusted registry entry, and the maintainer should add source/homepage information and declare curl as a required binary.