domain

SUSPICIOUS. The skill’s core capabilities fit its stated domain-hunting purpose, and most data flows go to expected vendor endpoints. Main concerns are moderate supply-chain/credential-forwarding exposure from optional external CLIs, use of RapidAPI as an intermediary for Domainr, and the ability to perform a charged purchase action, though the skill does require explicit confirmation and shows no clear malicious or covert behavior.