IPinfo
v1.0.0Perform IP geolocation lookups using ipinfo.io API. Convert IP addresses to geographic data including city, region, country, postal code, timezone, and coordinates. Use when geolocating IPs, enriching IP data, or analyzing geographic distribution.
⭐ 2· 2.1k·9 current·9 all-time
byTiago Martins@tiagom101
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (curl), and the optional IPINFO_TOKEN credential align with performing IP geolocation via ipinfo.io. The skill does not request unrelated services or credentials.
Instruction Scope
SKILL.md stays within scope (curl/requests against api.ipinfo.io and use of IPINFO_TOKEN). Minor inconsistencies: examples use jq (and Python's requests) but jq is not listed as a required binary and Python/requests are not advertised; otherwise instructions do not read local files or other environment variables.
Install Mechanism
No install spec (instruction-only). Nothing is written to disk or downloaded by the skill itself.
Credentials
The single credential IPINFO_TOKEN is appropriate for the API. SKILL.md describes the token as optional, while metadata declares it as the primary credential — this is a minor mismatch but not a security concern. No other secrets or unrelated env vars are requested.
Persistence & Privilege
always:false and normal model invocation are set (default). The skill does not request persistent/privileged platform presence.
Assessment
This skill is coherent for IP geolocation using ipinfo.io. Before installing: (1) understand that queries send IP addresses to a third‑party service (ipinfo.io) — avoid sending any IPs you consider sensitive or private; (2) if you plan to use the example pipelines, ensure jq is available on the agent host (examples assume jq and tr); (3) storing an IPINFO_TOKEN grants higher rate limits — keep that token secret and only set it if you trust ipinfo.io and want more throughput; (4) note the SKILL.md treats the token as optional but metadata lists it as the primary credential — this is likely harmless but verify whether your platform will require the token to be set. Overall the skill appears to do what it says.Like a lobster shell, security has layers — review code before you run it.
latestvk97cppmtw2ttb64jb8scf30gcs809d0k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌍 Clawdis
Binscurl
Primary envIPINFO_TOKEN