Domain Checker

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:20 PM UTC
• Version:
  1.1.0

Overview

This skill checks domain availability by contacting WHOIS and DNS services, which is expected for its purpose and is disclosed in the instructions.

Safe for ordinary domain checks. Avoid submitting confidential brand or product names unless you are comfortable exposing them through WHOIS and DNS lookups, and verify final registrar availability and price before purchasing.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence
• Finding: The skill documents and encourages network-capable behavior (WHOIS over port 43 and DNS lookups) but does not declare any permissions. Undeclared network access weakens review and containment controls, because a host system may invoke a skill that performs external queries without users or policy engines having explicit visibility into that capability.

VirusTotal

65/65 vendors flagged this skill as clean.