The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to call the local whois command-line utility for TLDs that do not support the newer RDAP protocol. This implementation is safe because it uses a list-based argument passing (avoiding shell interpolation) and strictly validates all domain inputs against a restrictive regular expression (DOMAIN_RE) before execution.
[EXTERNAL_DOWNLOADS]: The skill performs several types of network operations to fulfill its primary purpose:
Fetches the authoritative RDAP bootstrap configuration from IANA (data.iana.org), which is a well-known and trusted source.
Performs HTTPS GET requests to registry-operated RDAP servers discovered via the bootstrap.
Optionally performs HTTP/HTTPS probes to the domains being checked to identify "for sale" landing pages.
[DATA_EXFILTRATION]: The skill creates a local cache directory at ~/.cache/domain-checker/ to store the RDAP bootstrap file for 24 hours. It does not access or transmit sensitive local files or environment variables.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external RDAP and WHOIS servers. While this data is included in the output table, the script truncates evidence strings and the agent's interaction is limited to status reporting, minimizing the risk of a successful injection attack through external server responses.

domain-checker