porkbun
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Retrieves the official OpenAPI specification from Porkbun's well-known service domain. The skill implements a verification process using SHA-256 hashes and requires user confirmation before updating the local cached copy.
- [CREDENTIALS_UNSAFE]: Correctly handles sensitive API keys by utilizing environment variables and session-only exports, with explicit instructions to avoid writing credentials to permanent storage.
- [COMMAND_EXECUTION]: Uses standard system utilities like curl and jq to interact with the API and parse JSON responses. High-risk operations such as domain registration or nameserver updates are gated by mandatory confirmation prompts.
Audit Metadata