Get IP Geo Location

Look up geographic location and network information for any IPv4 or IPv6 address using the apipick IP Geolocation API. Returns country, continent, city, lati...

Security Scan

The skill is internally consistent: it simply documents how to call apipick's IP Geolocation API and only requests an apipick API key, which matches the stated purpose.

Purpose & Capability

Name/description, declared requirement (APIPICK_API_KEY), and runtime instructions all align: the skill's only functional requirement is an apipick API key to call https://www.apipick.com/api/ip-geolocation. There are no unrelated env vars, binaries, or config paths requested.

Instruction Scope

SKILL.md only instructs the agent to make GET requests to the apipick IP geolocation endpoint, use the x-api-key header with $APIPICK_API_KEY, and format results. It does not instruct reading arbitrary files or unrelated environment variables. Note: omitting the ip parameter will cause the caller's public IP (the agent/environment's external IP) to be sent to apipick, which is expected behavior but is a privacy consideration.

Install Mechanism

No install spec and no code files — instruction-only packaging — so nothing is downloaded or written to disk by the skill itself. This is the lowest-risk install model.

Credentials

Only a single credential (APIPICK_API_KEY) is required and declared as the primary credential, which is proportionate to calling an external API. Note: the API key is a secret and will be sent in the x-api-key header to apipick.com; users should avoid sharing other unrelated secrets and store the key securely.

Persistence & Privilege

The skill is not configured as always: true and does not request elevated or persistent system privileges. disable-model-invocation is false (normal), meaning the agent can invoke it autonomously; this is expected for useful skills and is not combined with other concerning privileges here.

Assessment

This skill appears to do exactly what it says: call apipick's IP Geolocation API using an APIPICK_API_KEY. Before installing or using it, consider: (1) Only provide a valid apipick API key if you trust apipick.com — the key will be sent to that service in the x-api-key header. (2) If you use the 'no ip parameter' mode, the agent will reveal the caller environment's public IP to apipick (this is expected but has privacy implications). (3) Requests cost credits (1 credit/request) — watch usage to avoid unexpected charges. (4) Store and transmit the API key securely and be prepared to revoke it at apipick.com if it is exposed. If you are comfortable with those tradeoffs, the skill is coherent and proportionate to its purpose.

apipick IP Geolocation

Look up location and network information for any public IPv4 or IPv6 address.

Endpoint

GET https://www.apipick.com/api/ip-geolocation

Authentication: x-api-key: YOUR_API_KEY header required. Get a free API key at https://www.apipick.com/dashboard/api-keys

Request

# Look up a specific IP
GET /api/ip-geolocation?ip=8.8.8.8

# Look up caller's own IP (omit parameter)
GET /api/ip-geolocation

Response

{
  "success": true,
  "code": 200,
  "message": "ok",
  "data": {
    "ip": "8.8.8.8",
    "country_code": "US",
    "country_name": "United States",
    "continent": "North America",
    "continent_code": "NA",
    "city": "Mountain View",
    "latitude": 37.4056,
    "longitude": -122.0775,
    "timezone": "America/Los_Angeles",
    "currency": "USD",
    "isp": "Google LLC",
    "asn": 15169
  },
  "credits_used": 1,
  "remaining_credits": 99
}

city, latitude, longitude may be empty or null for some IPs.

Error Codes

Code	Meaning
400	Invalid or private/reserved IP address
401	Missing or invalid API key
402	Insufficient credits
404	No geolocation data available for this IP
503	Geolocation database temporarily unavailable

Cost: 1 credit per request

Usage Pattern

1. Use $APIPICK_API_KEY env var as the x-api-key header value; if not set, ask the user for their apipick API key
2. Make the GET request (with or without ip query parameter)
3. Present location data in a readable format

See references/api_reference.md for full response field descriptions.