eliza-cloud-manage-domain
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes a dedicated vendor-provided software development kit (@elizaos/cloud-sdk) to interact with official API endpoints for domain and DNS management, ensuring consistent and authenticated communication.
- [SAFE]: Sensitive authentication tokens, specifically the ELIZAOS_CLOUD_API_KEY, are accessed through environment variables rather than being hardcoded within the instructions or scripts, which aligns with secure configuration management standards.
- [SAFE]: Instructions for the agent explicitly mandate user verification and confirmation before performing irreversible operations, such as deleting DNS records or detaching domains from applications.
- [SAFE]: The skill maintains clear functional boundaries between registrar-managed domains and external domains, correctly identifying that the latter are read-only to prevent unauthorized modification attempts.
- [SAFE]: The inclusion of standardized error handling and status code interpretations (403, 404, 409) provides a robust framework for managing access controls and preventing information disclosure.
Audit Metadata