domain
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the Vercel CLI from the NPM registry and the whois utility from the Homebrew package manager.
- [COMMAND_EXECUTION]: The skill executes shell commands using vercel, whois, and curl for domain research, status querying, and registration. It also utilizes agent-browser for automating interactions with the USPTO website.
- [PROMPT_INJECTION]: The skill ingests data from several external untrusted sources, creating an indirect prompt injection attack surface. * Ingestion points: External data is retrieved from WHOIS records, RDAP endpoints, third-party registrar APIs (Namecheap and Domainr), and USPTO website content. * Boundary markers: No delimiters or protective instructions are implemented to isolate external content from the agent's core instructions. * Capability inventory: The agent has the ability to perform network requests and execute financial transactions via registrar CLI tools. * Sanitization: The skill does not perform explicit sanitization or validation of the data retrieved from external sources before it is processed.
Audit Metadata