ip-lookup
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides
curlcommands to interact with external services for network diagnostics. - [EXTERNAL_DOWNLOADS]: Fetches information from well-known IP metadata providers
api.ipify.organdip-api.com. These are legitimate utility services used for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests data from external API responses. Ingestion points: data returned by
curlfromip-api.com. Boundary markers: none. Capability inventory: execution ofcurlcommands. Sanitization: none. While an ingestion surface exists, it is considered safe due to the specific and structured nature of the data retrieved from established providers.
Audit Metadata