IPv6地址查询 - 即刻数据
v1.0.0IPv6地址查询。输入IPv6地址,实时查询国家、省份、城市、地区、运营商及long_ip数值。适用场景:用户说“查一下240e:1f:1::1是哪里的IPv6”“这个IPv6属于哪个运营商”等。数据由即刻数据(jikeapi.cn)开放接口提供。
0· 18·0 当前·0 累计
安全扫描
OpenClaw
可疑
medium confidence该技能的代码和文档基本符合其声明用途(通过 jikeapi.cn 进行 IPv6 查询),但存在几处不一致及轻微风险:脚本会识别未完全声明的额外环境变量(JIKE_APPKEY 和 JIKE_API_BASE_URL)并读取本地 .env 文件,可能导致 API 端点或密钥来源被意外重定向。
评估建议
This 技能 应用ears to implement what it clAIms: it 运行s a Python script that calls jikeAPI.cn to look up IPv6 geolocation and needs an 应用Key. Before 安装ing, consider: (1) trust the 提供者 (jikeAPI.cn) since your 应用Key will be sent to their API; (2) the script will also look for JIKE_应用KEY and a local .env in the script directory and respects JIKE_API_BASE_URL if 设置 — 验证 you do not have those env vars 设置 to untrusted values, because that could redirect 请求s (and leak your key) to another host; (3) avoid us...详细分析 ▾
✓ 用途与能力
Name, description, required binary (python3), and the included script all align with an IPv6 geolocation lookup 技能 that calls jikeAPI.cn. The declared primary 凭证 (JIKE_IP_查询_V6_KEY) is 应用ropriate for the described API usage.
ℹ 指令范围
技能.md instructs the 代理 to 提取 an IPv6 and 运行 the included script, which is consistent. The script also reads a local .env file in its directory (to find keys) and accepts a --key override; these behaviors are documented in the script but not fully reflected in the metadata. The script does not read broader 系统 files or unrelated paths.
✓ 安装机制
No 安装 spec; this is an instruction-only 技能 with an included Python script. Nothing is 下载ed or written to arbitrary paths by an 安装er. Risk from 安装 mechanism is low.
⚠ 凭证需求
Metadata declares JIKE_IP_查询_V6_KEY but the script also accepts JIKE_应用KEY and an override JIKE_API_BASE_URL. That means the 技能 can source the key from an alternate env var or .env file, and the 端点 can be redirected via JIKE_API_BASE_URL. Those extra env hooks are reasonable for local 测试, but they are not declared in the 技能 metadata and could be abused to redirect 请求s (and the 应用key) to an unexpected 端点.
✓ 持久化与权限
技能 does not 请求 always:true, does not modify other 技能s or 系统-wide 设置tings. Autonomous invocation is allowed (平台 default) but nothing here elevates privilege beyond 运行ning the script when invoked.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install jike-ip-query-v6
镜像加速npx clawhub@latest install jike-ip-query-v6 --registry https://cn.longxiaskill.com镜像同步中
技能文档
IPv6地址查询 - 即刻数据 数据由即刻数据提供,帮助AI客户端快速接入可靠数据服务。 输入IPv6地址,查询:国家、省份、城市、地区、运营商、Long数值。
前置配置 export JIKE_IP_QUERY_V6_KEY=你的AppKey # 或使用通用Key export JIKE_APPKEY=你的AppKey
使用方法 python3 scripts/ip_query_v6.py 240e:1f:1::1 python3 scripts/ip_query_v6.py 240e:1f:1::1 --json
直接调用API: GET https://api.jikeapi.cn/v1/ip/query/v6?ip=240e:1f:1::1&appkey=YOUR_APPKEY
AI使用步骤
- 从用户消息中提取IPv6地址。
- 校验格式,IPv4不调用本Skill。
- 执行python3 scripts/ip_query_v6.py 。
- 返回国家、省份、城市、地区、运营商等信息。
返回字段 字段 含义 ip IPv6地址 long_ip Long数值 country 国家 province 省份 city 城市 area 地区 isp 运营商
脚本位置 scripts/ip_query_v6.py