checking-domain-availability
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with public APIs for domain checking (
domainee.dev), npm registry (registry.npmjs.org), GitHub (api.github.com), PyPI (pypi.org), and crates.io (crates.io). All services are well-known or related to the skill's primary function of checking name availability across developer ecosystems. - [DATA_EXPOSURE]: The skill only sends a user-provided name string to these APIs to check for existence. No sensitive local data, credentials, or environment variables are accessed or transmitted.
- [COMMAND_EXECUTION]: The skill provides example
curlcommands for documentation purposes. These commands are benign and target the public availability APIs described in the workflow. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from API responses (JSON). However, it defines a strict workflow for parsing specific fields (like
availableandregistrarHint) and displaying them in a structured table, which minimizes the risk of the agent interpreting API data as instructions.
Audit Metadata