ClawHub
Back to skill

Security audit

Porkbun Domains & DNS

Security checks for vulnerabilities and agentic risk

Overview

This is a legitimate Porkbun domain-management skill, but it can make high-impact DNS/domain changes and has unsafe credential loading from a workspace .env file.

Review before installing. Use this only for Porkbun accounts where you are comfortable giving the agent domain/DNS authority, require explicit confirmation before any delete, nameserver, forwarding, or auto-renew change, and avoid using a shared or untrusted workspace .env until the credential loader is changed to parse keys safely without eval.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The skill documents destructive operations such as nameserver updates and DNS deletions without clear warnings, confirmation guidance, or rollback advice. In this context, these actions can immediately disrupt website, email, and domain control for production assets, so omission of safety guidance materially increases operational risk.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The script automatically loads API credentials from a workspace .env file without any user notice or consent, which expands the skill's access to secrets beyond explicit environment injection. In an agent setting, this can cause unintended use of stored credentials and increases the chance of secret exposure or unauthorized API actions if the workspace is shared or compromised.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The script exposes destructive operations such as DNS deletion, nameserver updates, URL forwarding changes, and auto-renew toggles with no confirmation, dry-run mode, or guardrails. In an agent skill, a mistaken or prompt-injected invocation could immediately disrupt domain resolution, reroute traffic, or alter billing-related settings.

Static analysis

No suspicious patterns detected.