domain-checker
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the registry bootstrap list from IANA's official domain (data.iana.org). This is a well-known and trusted source for Internet infrastructure information.
- [COMMAND_EXECUTION]: The skill executes a local Python script scripts/check_domains.py to perform the domain lookups. The script uses standard libraries and implements timeouts and concurrency limits.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external RDAP servers, creating a potential surface for indirect prompt injection if a registry server provides malicious instructions in its response. 1. Ingestion points: The check function in scripts/check_domains.py fetches and parses JSON responses from external registry endpoints. 2. Boundary markers: The skill output does not currently use explicit delimiters to separate external registry descriptions from the rest of the agent's context. 3. Capability inventory: The skill is limited to performing network GET requests and outputting text/JSON to the CLI. 4. Sanitization: The script performs domain validation and uses regular expressions to extract status information, though the detail field passes through portions of the external server's response strings.
Audit Metadata