dns-lookup
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Queries DNS records and domain metadata from established, well-known services including Google (dns.google), Cloudflare (cloudflare-dns.com), and the RDAP bootstrap service (rdap.org).
- [COMMAND_EXECUTION]: Uses the standard
curlutility to perform network requests to external APIs for data retrieval. These commands are read-only and specific to fetching JSON-formatted DNS or registration data. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external DNS and RDAP servers to decode and display information like SPF policies or registrar details. This represents a surface for untrusted data ingestion, though the skill's role is limited to data analysis and presentation.
- Ingestion points: External DNS responses from Google/Cloudflare and RDAP JSON from rdap.org.
- Boundary markers: None explicitly defined in the provided file.
- Capability inventory: Uses
curlfor network requests. - Sanitization: Focuses on parsing structured JSON data into human-readable explanations.
Audit Metadata