ip-lookup

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides curl commands to interact with external services for network diagnostics.
  • [EXTERNAL_DOWNLOADS]: Fetches information from well-known IP metadata providers api.ipify.org and ip-api.com. These are legitimate utility services used for the skill's stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests data from external API responses. Ingestion points: data returned by curl from ip-api.com. Boundary markers: none. Capability inventory: execution of curl commands. Sanitization: none. While an ingestion surface exists, it is considered safe due to the specific and structured nature of the data retrieved from established providers.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:17 PM