Security audit

Domain Checker

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims: it checks domain availability using WHOIS and DNS, with limited hardening issues around unvalidated domain text in terminal output.

Before installing, understand that this skill makes outbound WHOIS and DNS queries and may reveal the domains you are checking to external infrastructure. Use trusted domain inputs where possible, and treat results from unusual or machine-supplied domain strings cautiously because malformed input could affect displayed output.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/check_domains.sh:56
Finding: Terminal and Log Output Injection in the Bash Domain Checker
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/check_domains.py:101
Finding: Terminal and Log Output Injection in the Python Domain Checker
Content: View full analysis
str: """Check a single domain. Returns verdict string.""" domain = domain.strip().lower() # Step 1: whois query whois_text = whois_query(domain) whois_lower = whois_text.lower() has_created = any(p in whois_lower for p in CREATED_PATTERNS) has_not_found = any(p in whois_lower for p in NOT_FOUND_PATTERNS) # Extract creation date for display created_line = "" if has_created: for line in whois_text.splitlines(): ll = line.lower().strip() if any(p in ll for p in CREATED_PATTERNS): created_line = line.strip() break # Step 2: DNS check has_a, has_any_dns = dns_check(domain) # Step 3: Cross-verify if has_created: return f"❌ {domain:<30s} TAKEN {created_line}" elif has_not_found and not has_any_dns: return f"✅ {domain:<30s} AVAILABLE" elif has_not_found and has_any_dns: return f"⚠️ {domain:<30s} LIKELY TAKEN (has DNS records)" elif has_any_dns: return f"⚠️ {domain:<30s} LIKELY TAKEN (has DNS records)" elif whois_text.strip(): # Got whois response but no clear signal return f"❓ {domain:<30s} UNKNOWN (whois unclear — check manually)" else: return f"❓ {domain:<30s} UNKNOWN (whois server unreachable — check manually)" def main(): domains = [] if len(sys.argv) > 1: domains = sys.argv[1:] elif not sys.stdin.isatty(): for line in sys.stdin: domains.extend(line.strip().split()) # ... for d in domains: result = check_domain(d) print(result) ``` ### Technical Analysis Calling `strip().lower()` normalizes casing and removes only leading an ...[truncated 1754 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 88% confidence
Finding: The skill describes and invokes network-capable scripts (whois, DNS, raw socket access) but does not declare any explicit tool scope such as permissions or allowed-tools. This creates a governance gap: an agent may execute network operations without clear sandboxing or policy review, increasing the risk of unintended outbound access, misuse in restricted environments, or expansion of capability beyond what the platform expects.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.