namecheap
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements secure credential management by storing Namecheap API keys in a local configuration file with restricted filesystem permissions (600) and using interactive getpass prompts to avoid exposing secrets in logs or chat history.
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to api.namecheap.com, api.ipify.org, and ifconfig.me, which are well-known and official services required for the skill's documented DNS management and IP whitelisting functionality.
- [COMMAND_EXECUTION]: DNS operations are performed using a bundled Python wrapper (namecheap.py) that uses no third-party dependencies, significantly reducing the supply chain risk profile.
Audit Metadata