domain-finder

Warn

Audited by Snyk on Aug 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly requires a VERCEL_TOKEN and references programmatic purchase actions: it directs use of the bundled script for availability/pricing checks and explicitly tells the user they can buy via vercel domains buy <domain> or "the API's buy endpoint" (and references vercel-api.md for buying). Those elements enable the agent to perform domain purchase transactions (move money) through the registrar API.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 4, 2026, 04:01 AM
Issues
1
Security Audit — snyk — domain-finder