Agent skill

Ip Check

by majiayu000 in majiayu000/spellbook

检测一个 IP 或住宅/机房代理节点的质量——注册库、地理库一致性、ASN/org、风控信誉、黑名单、住宅真实性、BGP 宣告、目标服务(Grok/Claude/ChatGPT)解锁与延迟三角测量。判定该 IP 能否安全用于 AI 服务(避免被地理库误判到别国导致区域锁)。当用户说"查这个 IP"、"这个节点在哪"、"这个代理能用吗"、"IP 质量检测"、"验收住宅 IP"、"为什么被判定在…

MITAuto-check passed

Install Ip Check

skills CLI
$ npx skills add majiayu000/spellbook --skill ip-check -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install majiayu000/spellbook ip-check --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/majiayu000/spellbook.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/ip-check .claude/skills/ip-check && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
ip-check
GitHub stars
287
Token cost
~1.2k tokens
SKILL.md length
394 words
Files
2 (incl. scripts)
Skills in repo
97
Repo updated
First seen
Licence
MIT

At a glance

检测一个 IP 或住宅/机房代理节点的质量——注册库、地理库一致性、ASN/org、风控信誉、黑名单、住宅真实性、BGP 宣告、目标服务(Grok/Claude/ChatGPT)解锁与延迟三角测量。判定该 IP 能否安全用于 AI 服务(避免被地理库误判到别国导致区域锁)。当用户说"查这个 IP"、"这个节点在哪"、"这个代理能用吗"、"IP 质量检测"、"验收住宅 IP"、"为什么被判定在…

  • Works in 4 steps: 注册库 = ARIN — rdap.rir == "ARIN" 且… → 三库一致判 US — geo.consensus == true 且国家都是… → ASN/org 一致且真 ISP — 分三种情况 → …
  • SKILL.md covers Operating Contract, 何时用, 运行 and 检测层说明, plus 3 more sections
  • Runs Python scripts from its folder; calls python3; needs IPQS_KEY and ABUSEIPDB_KEY

What it does

Ip Check is an agent skill from majiayu000/spellbook. 检测一个 IP 或住宅/机房代理节点的质量——注册库、地理库一致性、ASN/org、风控信誉、黑名单、住宅真实性、BGP 宣告、目标服务(Grok/Claude/ChatGPT)解锁与延迟三角测量。判定该 IP 能否安全用于 AI 服务(避免被地理库误判到别国导致区域锁)。当用户说"查这个 IP"、"这个节点在哪"、"这个代理能用吗"、"IP 质量检测"、"验收住宅 IP"、"为什么被判定在 X 国"、"check ip"、给出 socks5 代理凭证问归属或解锁时使用。

Its SKILL.md is about 1.2k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including scripts (for example `scripts/ipcheck.py`).

It works with OpenAI. The repository describes itself as: Cross-runtime skills for Claude Code, Codex, and multi-agent workflows. The licence is MIT.

Example prompts

  • “查这个 IP”
  • “这个节点在哪”
  • “这个代理能用吗”
  • “/ip-check”

Requirements

  • Python 3
  • A credential in IPQS_KEY
  • A credential in ABUSEIPDB_KEY

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. 注册库 = ARIN — rdap.rir == "ARIN" 且 rdap.country == "US"。RIPE/APNIC + 非美 country = ❌(这是西班牙段的死因)。lease_flag=true(mnt 出现 interlir/lease)= ❌…
  2. 三库一致判 US — geo.consensus == true 且国家都是 US。geo.split == true(库之间打架)= ⚠️ 强警告,这就是"纸面搬家"信号,分歧本身比任何单库结论更重要。
  3. ASN/org 一致且真 ISP — 分三种情况
  4. 风控分干净 — proxycheck risk==0、proxy/vpn=no、type 非 hosting;ipapi.is 各 is_* 全 false;有 IPQS 时 fraud_score 低。任一命中 datacenter 或 abuser = ❌。

What it can do on your machine

Read from SKILL.md and the folder at commit ed52af7. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (Python), which the agent can run.

    Shell commands in SKILL.md call:

    • python3

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • IPQS_KEY
    • ABUSEIPDB_KEY

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Ip Check loads about 1.2k tokens when it runs. Until then it costs about 62 tokens; SKILL.md has 394 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~62
When it runs · the whole SKILL.md, loaded when a task matches
~1.2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from majiayu000/spellbook at commit ed52af7, republished under its MIT licence (© majiayu000). 394 words, ~1,234 tokens.

Download SKILL.mdSave it as .claude/skills/ip-check/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
ip-check
description
检测一个 IP 或住宅/机房代理节点的质量——注册库、地理库一致性、ASN/org、风控信誉、黑名单、住宅真实性、BGP 宣告、目标服务(Grok/Claude/ChatGPT)解锁与延迟三角测量。判定该 IP 能否安全用于 AI 服务(避免被地理库误判到别国导致区域锁)。当用户说"查这个 IP"、"这个节点在哪"、"这个代理能用吗"、"IP 质量检测"、"验收住宅 IP"、"为什么被判定在 X 国"、"check ip"、给出 socks5 代理凭证问归属或解锁时使用。

IP 质量检测

判定一个 IP(或带凭证的 socks5 代理)是否适合用于 AI 服务(Grok/Claude/ChatGPT),核心是识破"物理在美国、纸面在别国"的租赁 IP 段——这类 IP 会被 ipinfo/MaxMind 等商业地理库判到欧盟,导致 Grok/Claude 区域锁,而风控只看地理库不看物理延迟。

Operating Contract

只读检测,不改任何系统配置。脚本只发出站 HTTP/DNS 查询和(带凭证时)通过代理的探测,不写文件、不改代理设置、不动网络配置。

Direct actions:

  • 对用户给出的 IP 或代理凭证跑 ipcheck.py,读 JSON,按 4 条硬标准出记分卡。
  • 区分事实(JSON 字段)与推断(如"物理大概率在美东,依据延迟排名")。

Escalate before:

  • 用户要求"改配置/切节点/加进 Clash"等落地动作时——那属于 clash-doctor 等运维 skill,本 skill 只负责判定,不代切。
  • DNSBL 层报 unreliable(DNS 劫持)时,必须提示用户换网络重跑,不得把未测准当"干净"。
  • 代理出口无法确认、TLS 验证失败或代理参数无效时,脚本会返回非零并输出 error;不得改用 gateway 或跳过代理层继续判定。

Evidence-backed pushback:

  • 用户坚称某 IP 是美国、但 rdap 显示 RIPE 注册 + country 非 US 时,以 whois/geo 字段反驳,不附和主观判断。
  • 单库判 US 不等于合格;三库分歧(split)本身就是"纸面搬家"信号,要指出而非取信最乐观的那一家。

Feedback loop:

  • 换节点/换代理后重跑,用记分卡逐条对比(如西班牙段=退货、纽约段=合格),确认问题项确实消除。
  • 有 IPQS_KEY/ABUSEIPDB_KEY 时补跑风控源;缺 key 显式标 skipped,不把"未检测"当"通过"。

何时用

  • 用户给一个 IP 问"在哪/能用吗/为什么被判定在某国"
  • 用户给 socks5 代理凭证(socks5://user:pass@host:port)问归属或某服务解不解锁
  • 买了住宅/机房代理要验收
  • 排查 AI 服务的区域锁

运行

脚本随 skill 安装位置运行。优先使用当前 runtime 的安装路径:Codex 通常是 ~/.agents/skills/ip-check/scripts/ipcheck.py,Claude Code 通常是 ~/.claude/skills/ip-check/scripts/ipcheck.py,仓库开发时也可用 skills/ip-check/scripts/ipcheck.py。

bash
python3 <script> <IP>                                          # 只查 IP
python3 <script> socks5://user:pass@host:port                 # 带凭证多跑代理实测层
python3 <script> <IP> --proxy socks5://user:pass@host:port     # IP 与代理分开给

脚本输出结构化 JSON(9 层),你的工作是读 JSON 做判定,不要只转述字段。可选环境变量 IPQS_KEY(IPQualityScore 免费 5000/月)、ABUSEIPDB_KEY(免费 1000/天)存在时自动多跑两个风控源,没有则该项标 skipped。

检测层说明

层数据源看什么
rdaprdap.org → RIR注册库(ARIN=北美好 / RIPE=欧洲需警惕)、org、lease_flag、country
geoipinfo + ip-api + ipwho三库判定国家是否一致(consensus)还是分歧(split)
asnipinfo org + rdapASN 是否真 ISP、org 是否与 ASN 主体一致
reputationproxycheck + ipapi.is (+IPQS +AbuseIPDB)proxy/vpn/datacenter 标记、risk 分、欺诈分
dnsblSpamhaus/Barracuda/SORBS/SpamCop垃圾邮件黑名单(自带 DNS 劫持检测)
ptrdig -x反向 DNS 是否有真住宅域名格式(hsd1/cable/dsl)
bgpRIPEstat实际由哪个 ASN 宣告该前缀
services代理直连各服务Grok/ChatGPT/Anthropic 是否可达、cf_loc、是否区域锁(需代理)
exit代理查出口 3 次单跳还是轮换池、出口 IP 是否等于服务器 IP(需代理)
latency代理→各洲 AWS TLS 建连 ×3物理最近的大洲(需代理)

判定协议(读完 JSON 按此裁决)

输出一张记分卡,4 条硬标准逐项 ✅/⚠️/❌,再给总判定。

硬标准(4 条,全过才算合格):

  1. 注册库 = ARIN — rdap.rir == "ARIN" 且 rdap.country == "US"。RIPE/APNIC + 非美 country = ❌(这是西班牙段的死因)。lease_flag=true(mnt 出现 interlir/lease)= ❌ 直接退货。
  2. 三库一致判 US — geo.consensus == true 且国家都是 US。geo.split == true(库之间打架)= ⚠️ 强警告,这就是"纸面搬家"信号,分歧本身比任何单库结论更重要。
  3. ASN/org 一致且真 ISP — 分三种情况:
    • asn.is_real_isp == true 且 asn.org_matches_asn == true → ✅。
    • asn.is_real_isp == true 但 asn.org_matches_asn == false(org 是陌生第三方名,如 Treochoy9/AviationAI)→ ⚠️ 租赁段特征,可用但有漂移风险,不是直接挂。
    • asn.is_real_isp == false(ASN 不在真 ISP 白名单)→ 不单独否决,白名单只覆盖北美主流 ISP,合法的欧洲/亚洲/中小 ISP 会漏判。结合 reputation 综合看:若同时命中 datacenter/hosting → 退货;否则归 ⚠️ 慎用,提示"ASN 非主流 ISP,人工确认是否真住宅"。
  4. 风控分干净 — proxycheck risk==0、proxy/vpn=no、type 非 hosting;ipapi.is 各 is_* 全 false;有 IPQS 时 fraud_score 低。任一命中 datacenter 或 abuser = ❌。
Show full SKILL.md (135 more words)Show less

辅助信号(加权,不单独否决):

  • dnsbl.status=="unreliable" → 必须提示用户:当前网络有 DNS 劫持(多半是 Clash TUN fake-ip),黑名单这项没测准,要在非 TUN 网络重跑才有效。不要把 unreliable 当"干净"。
  • ptr.has_ptr==false → 挂靠段常见特征,弱负面信号(纽约段也没 PTR 但仍合格,所以不单独否决)。
  • bgp.announced_by 与 rdap org 不同主体 → IP 段近期可能易主,记录但不否决。

代理实测层(有凭证时,价值最高——直接问风控本人):

  • services.results.grok.com.region_blocked==true(且是精确短语命中)→ Grok 确实锁了这个出口,最强负面证据。注意 region_blocked 是弱启发信号(首页是 SPA 空壳),http_status 和 cf_loc 才是硬信号——cf_loc != "US" 说明 Cloudflare 也判非美。
  • exit.stable==false → 买静态却拿到轮换池,另一种坑,报告出来。
  • exit.exit_ip != 服务器IP → 多跳,记录。
  • latency.closest 是欧洲/亚洲但地理库判 US,或反之 → 物理/纸面分裂,明确指出"物理在 X,纸面在 Y,风控信纸面"。

总判定三档:

  • 合格 — 4 条硬标准全 ✅,可放心用于 AI 服务。
  • 租赁段慎用 — 硬标准过但有 ⚠️(org 不匹配 / 无 PTR / BGP 易主),能用但说明风险,建议定期复查。
  • 退货 — 任一 ❌(RIPE 注册 / 非美 country / lease_flag / 三库判非美 / datacenter / abuser / is_real_isp=false 且命中 hosting / 服务区域锁)。给出具体死因和"找代理商换 ARIN 注册 + ipinfo 显示 US 的 IP"话术。

输出格式

给用户一张中文记分卡:先一句话总判定,再逐层列关键证据(标注 ✅/⚠️/❌),最后给行动建议。区分事实(来自 JSON 字段)和推断(如"物理大概率在美东,依据延迟排名")。不要罗列所有原始字段,只挑支撑判定的关键证据。

已知边界

  • scamalytics 全面封自动化访问(实测 403),协议已排除,用 proxycheck + ipapi.is + IPQS 替代。
  • DNSBL 在 Clash TUN 环境不可信,脚本会自动检测并标 unreliable,据此提示用户。
  • DNSBL 解析器故障和 Spamhaus 127.255.255.0/24 查询错误码同样标 unreliable,不计作"未列入"或命中。
  • SOCKS HTTPS 探测使用系统 CA 和 hostname 验证;证书失败属于探测失败,不得关闭 TLS 校验重试。
  • services 层首页多为 SPA 空壳,region_blocked 是弱信号,以 http_status/cf_loc 为准。
  • ip-api.com 限 45 次/分钟、proxycheck 免费 100 次/天,批量查多个 IP 时注意配额。

© majiayu000, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (scripts) in skills/ip-check of majiayu000/spellbook.

  • SKILL.md
  • scripts/ipcheck.py

Open the folder on GitHubat commit ed52af7

Compare with similar skills

Ip Check next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Ip Check compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Ip Check this skillmajiayu000/spellbook287—~1.2kAutomated safety check: PassMIT
Geo Fundamentalswasp-lang/wasp19k9 repos~861Automated safety check: PassMIT
AI SDKvercel-labs/ai-facts16820 repos~1.2kAutomated safety check: PassNone
AI Image Generation and Editingzhayujie/CowAgent47k—~1.3kAutomated safety check: PassMIT
PR Design DocOpenHands/OpenHands90k—~2.4kAutomated safety check: PassMIT
SEO GeoReScienceLab/opc-skills1.8k4 repos~2.1kAutomated safety check: PassApache-2.0

Similar skills

  • Geo Fundamentals

    wasp-lang/wasp

    Generative Engine Optimization for AI search engines (ChatGPT, Claude, Perplexity).

    19k GitHub starsUsed in 9 repos~861 tokens
    Marketing & SEOAuto-check passed
  • AI SDK

    vercel-labs/ai-facts

    Official

    Answer questions about the AI SDK and help build AI-powered features.

    168 GitHub starsUsed in 20 repos~1.2k tokens
    AI & LLM EngineeringAuto-check passed
  • Generates or edits images from text prompts through a Python script that picks an image backend based on which API keys are configured.

    47k GitHub stars~1.3k tokensUpdated today
    Media & CreativeAuto-check passed
  • PR Design Doc

    OpenHands/OpenHands

    For a non-trivial pull request, write a self-contained HTML design doc under the temporary .pr/ directory and link a visibility-appropriate preview in the PR description, so maintainers grasp the…

    90k GitHub stars~2.4k tokensUpdated today
    DevelopmentAuto-check passed
  • SEO Geo

    ReScienceLab/opc-skills

    SEO & GEO (Generative Engine Optimization) for websites. An agent skill from ReScienceLab/opc-skills.

    1.8k GitHub starsUsed in 4 repos~2.1k tokens
    Marketing & SEOAuto-check passed
  • Open Code Review CLI

    alibaba/open-code-review

    Runs the ocr command-line tool to review Git changes, a commit or a branch comparison with an AI model, returning line-level comments and optionally applying fixes.

    46k GitHub stars~3.1k tokensUpdated today
    DevelopmentAuto-check passed

More from majiayu000/spellbook

All 97 skills in this repo
  • Skill Ecosystem Doctor

    majiayu000/spellbook

    Audits and repairs how coding-agent Skills are owned, copied and exposed across runtimes, from canonical sources to quarantine and retirement.

    287 GitHub stars~3k tokensUpdated yesterday
    Auto-check passed
  • AGENTS.md Scaffold

    majiayu000/spellbook

    Scans a repository for real evidence and proposes, or on request writes, a small stack of root and scoped AGENTS.md files with validation commands and generated-file boundaries.

    287 GitHub stars~1.5k tokensUpdated yesterday
    Auto-check passed
  • Product Demo Builder

    majiayu000/spellbook

    Plans, produces or diagnoses evidence-backed product demo videos: script, capture plan, pacing checks and verified final media built on real product behavior.

    287 GitHub stars~3.3k tokensUpdated yesterday
    Auto-check passed
  • Flowguard Task Guard

    majiayu000/spellbook

    Single entry point that routes long or ambiguous agent tasks, checks live state, bounds autonomous loops and leaves a resumable handoff.

    287 GitHub stars~2.1k tokensUpdated yesterday
    Auto-check passed
  • npm Supply Chain Check

    majiayu000/spellbook

    Scans a repository, its lockfiles and node_modules for known malicious npm package versions and install-time indicators, using a read-only Python scanner.

    287 GitHub stars~1.5k tokensUpdated yesterday
    Auto-check passed
  • Product Manager Toolkit

    majiayu000/spellbook

    Product management helpers: a RICE scoring script, an interview transcript analyzer and PRD templates for prioritizing features, synthesizing research and writing requirements.

    287 GitHub stars~2.2k tokensUpdated yesterday
    Auto-check passed

Works with

Questions about Ip Check

What does Ip Check do?

检测一个 IP 或住宅/机房代理节点的质量——注册库、地理库一致性、ASN/org、风控信誉、黑名单、住宅真实性、BGP 宣告、目标服务(Grok/Claude/ChatGPT)解锁与延迟三角测量。判定该 IP 能否安全用于 AI 服务(避免被地理库误判到别国导致区域锁)。当用户说"查这个 IP"、"这个节点在哪"、"这个代理能用吗"、"IP 质量检测"、"验收住宅 IP"、"为什么被判定在…. Ip Check is an agent skill from majiayu000/spellbook.

How do I install Ip Check in Claude Code?

Run `npx skills add majiayu000/spellbook --skill ip-check -a claude-code`. Or copy the skill folder (skills/ip-check in majiayu000/spellbook) into .claude/skills/ip-check in your project. Claude Code loads it when a task matches its description.

How do I install Ip Check in Codex?

Run `npx skills add majiayu000/spellbook --skill ip-check -a codex`. Or copy the skill folder (skills/ip-check in majiayu000/spellbook) into .agents/skills/ip-check in your project. Codex loads it when a task matches its description.

Can I use Ip Check in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add majiayu000/spellbook --skill ip-check -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/ip-check, .gemini/skills/ip-check, .github/skills/ip-check and .opencode/skills/ip-check in your project.

What does Ip Check need to run?

Going by SKILL.md and its folder, Ip Check needs Python for the scripts in its folder, the command-line tools its instructions call (python3) and credentials named IPQS_KEY and ABUSEIPDB_KEY. Our summary lists: Python 3; A credential in IPQS_KEY; A credential in ABUSEIPDB_KEY.

Does Ip Check access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Ip Check safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Ip Check use?

Ip Check is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Ip Check use?

About 1.2k tokens (SKILL.md is roughly 4.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Ip Check?

Skills that share tags, products or a category with Ip Check: Geo Fundamentals (wasp-lang/wasp, 19k stars), AI SDK (vercel-labs/ai-facts, 168 stars), AI Image Generation and Editing (zhayujie/CowAgent, 47k stars) and PR Design Doc (OpenHands/OpenHands, 90k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Ip Check?

majiayu000 (a GitHub user) maintains it in majiayu000/spellbook, which has 287 GitHub stars. The repository holds 97 skills in this directory. The repository was last updated on October 8, 2026.

Source: majiayu000/spellbook on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.