ip-api
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or safety bypass attempts were detected within the skill files or instructions.\n- [EXTERNAL_DOWNLOADS]: The skill performs HTTP requests to the well-known public service ip-api.com to fetch IP geolocation metadata. This behavior is consistent with the skill's stated purpose and does not involve downloading executable code.\n- [COMMAND_EXECUTION]: The provided Node.js scripts use built-in modules (
http,net) for networking. Input for the proxy port is safely handled usingparseInt(), and no arbitrary command execution or shell injection vectors were found.\n- [DATA_EXFILTRATION]: No sensitive local files, credentials, or environment variables are accessed or transmitted. The network operations are limited to communicating with the IP lookup API.
Audit Metadata