where-is-my-ip

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a Python script (check.py) using the standard python3 binary as specified in the metadata and SKILL.md documentation. This is standard behavior for a script-based skill.
  • [EXTERNAL_DOWNLOADS]: The skill makes HTTP GET requests to https://ifconfig.co/json to retrieve IP geolocation data. This is the primary intended function of the skill and uses the standard Python urllib library.
  • [DATA_EXFILTRATION]: While the skill retrieves the user's current outbound IP, this data is only printed to the standard output or standard error for the user's visibility. It is not transmitted to any unauthorized external domains or third-party servers.
  • [REMOTE_CODE_EXECUTION]: The script uses sys.path.insert to import local modules from /data/workspace/skills/byo-proxy. This is a documented integration pattern for sharing functionality between skills within the platform and does not involve executing code from an untrusted remote source.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 01:04 AM
Security Audit — agent-trust-hub — where-is-my-ip