ClawHub
Back to skill

Security audit

China Ip

Security checks for vulnerabilities and agentic risk

Overview

The skill has a legitimate IP lookup purpose, but its shell command templates can be unsafe with untrusted input and its main lookup service uses plain HTTP.

Review before installing. Use this only for non-sensitive IP or domain lookups, prefer the HTTPS ipinfo.io path when possible, and ensure the agent validates lookup values as IP addresses or safe hostnames and passes them as literal arguments rather than through shell string interpolation.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)

T09 · Insecure Skill Coding Practices

Error
Location
SKILL.md:35
Finding

Shell Command Injection Through Unsafe User-Input Interpolation

Content
View full analysis
Remediation
View remediation

T09 · Insecure Skill Coding Practices

Warning
Location
SKILL.md:35
Finding

Primary IP Lookup Service Uses Unencrypted HTTP

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Confidence
88% confidence
Finding

The skill instructs the agent to transmit user-supplied IP addresses, domains, or even the host's public IP to third-party services via curl. This creates a real external data transmission risk, especially because the primary endpoint uses plain HTTP, allowing network observers to see requests and responses, and because querying '本机公网IP' discloses environment metadata about the host running the skill.

Content

Scanner excerpt · SKILL.md (reported line 11)May include surrounding context.

md
emoji: "🌐"
    requires:
      bins:
        - curl
---

# IP 地址查询 IP Lookup

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill hardcodes lang=zh-CN in its primary query endpoint, which makes the skill operate in Chinese by default rather than offering a language choice. This is a natural-language locale policy issue because the file describes support for international IPs but does not provide user opt-in or a configurable locale.

Content

No source excerpt is available for this finding.