domain-checker

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the registry bootstrap list from IANA's official domain (data.iana.org). This is a well-known and trusted source for Internet infrastructure information.
  • [COMMAND_EXECUTION]: The skill executes a local Python script scripts/check_domains.py to perform the domain lookups. The script uses standard libraries and implements timeouts and concurrency limits.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external RDAP servers, creating a potential surface for indirect prompt injection if a registry server provides malicious instructions in its response. 1. Ingestion points: The check function in scripts/check_domains.py fetches and parses JSON responses from external registry endpoints. 2. Boundary markers: The skill output does not currently use explicit delimiters to separate external registry descriptions from the rest of the agent's context. 3. Capability inventory: The skill is limited to performing network GET requests and outputting text/JSON to the CLI. 4. Sanitization: The script performs domain validation and uses regular expressions to extract status information, though the detail field passes through portions of the external server's response strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 06:40 PM