domain-research

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch metadata and metrics from domaindetails.com and semrush.com.
  • [COMMAND_EXECUTION]: Uses curl to interact with remote APIs and jq to parse data; these commands are executed as part of the domain research workflow.
  • [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill reads WHOIS, RDAP, and marketplace listing data from external endpoints (mcp.domaindetails.com and api.domaindetails.com) mentioned in SKILL.md. 2. Boundary markers: No delimiters or specific instructions to ignore embedded content are used when presenting external data to the agent. 3. Capability inventory: The skill has network capabilities via curl and data processing capabilities via jq. 4. Sanitization: There is no evidence of filtering or sanitization performed on the content retrieved from external domain lookup services before it is integrated into the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:48 PM