Skills
Navigate
skills/tychohq/agent-skills/domain-check/Gen Agent Trust Hub

domain-check

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The skill reads local authentication tokens and configuration files created by the Vercel CLI to authorize API requests.
  • Evidence: The domain-check script reads ~/.local/share/com.vercel.cli/auth.json to retrieve the VERCEL_TOKEN.
  • Evidence: The script reads ~/.local/share/com.vercel.cli/config.json to retrieve the currentTeamId.
  • Note: This data is sent to the official Vercel API (api.vercel.com) and is necessary for the skill's intended functionality.
  • [COMMAND_EXECUTION]: The skill executes shell commands and CLI tools to perform domain operations.
  • Evidence: Uses curl to communicate with the Vercel Registrar API.
  • Evidence: Uses jq to process configuration files and API responses.
  • Evidence: Invokes npx vercel domains for interactive purchase and management tasks.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with external Vercel endpoints.
  • Evidence: Makes requests to https://api.vercel.com/v1/registrar/domains/ for pricing and availability checks.
  • Note: Vercel is a well-known and trusted service provider.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 01:50 PM