domaininfo

Look up domain WHOIS information and (optionally) capture website screenshots.

When to Use

When the user types whois <domain> or whois <url> or whois <email>:

• Strip any https://, http://, www. prefixes
• If input contains @, extract the domain part after @ (e.g., user@example.com → example.com)

Security Considerations

• Input validation: After extracting the domain, only allow alphanumeric, hyphen, and dot characters. Reject anything else.
• Command injection prevention: Never interpolate user input directly into shell strings. Prefer argument arrays / safe libraries.
• Timeouts: Every external call must have a bounded timeout (e.g., 10s for WHOIS/DNS, 10s for TLS).
• Error handling: On failure, return a generic user-friendly message and keep details internal.
• Output sanitization: Build the final message as a single string before sending; never send partial responses.
• File-system safety: If writing screenshots, restrict writes to a known directory under the skill folder and verify paths stay within it.
• Rate-limiting & caching: Cache IP-to-country lookups briefly to avoid hammering external services.