domain-research
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch metadata and metrics from domaindetails.com and semrush.com.
- [COMMAND_EXECUTION]: Uses
curlto interact with remote APIs andjqto parse data; these commands are executed as part of the domain research workflow. - [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The skill reads WHOIS, RDAP, and marketplace listing data from external endpoints (mcp.domaindetails.com and api.domaindetails.com) mentioned in
SKILL.md. 2. Boundary markers: No delimiters or specific instructions to ignore embedded content are used when presenting external data to the agent. 3. Capability inventory: The skill has network capabilities viacurland data processing capabilities viajq. 4. Sanitization: There is no evidence of filtering or sanitization performed on the content retrieved from external domain lookup services before it is integrated into the agent's context.
Audit Metadata