ClawHub

Premium Domain Search

v1.1.0

Search for premium domains for sale across Afternic, Sedo, Atom, Dynadot, Namecheap, NameSilo, and Unstoppable Domains.

⭐ 3· 2k·4 current·4 all-time
by@julianengel
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill's description (searching multiple marketplaces) matches the runtime instruction which calls a single aggregator API (https://api.domaindetails.com). That's a plausible implementation, but provenance is unknown (no homepage/source) and there's an inconsistency: registry metadata lists no required binaries while SKILL.md metadata declares a dependency on curl.
ℹ
Instruction Scope
SKILL.md gives a single curl example that sends the queried domain to an external API and parses JSON with jq. The instructions stay within the stated purpose (searching marketplaces) and do not request extra files/credentials, but every domain query (which may be sensitive) will be transmitted to that third party.
✓
Install Mechanism
There is no install spec and no code files; the skill is instruction-only. This minimizes on-disk risk. The SKILL.md expects curl/jq to be available, but does not install anything itself.
✓
Credentials
The skill requests no environment variables, no credentials, and no config paths—proportionate to its stated purpose.
✓
Persistence & Privilege
always is false and the skill does not request persistent/system-level changes. It does not attempt to modify other skills or system config.
Scan Findings in Context
[no_regex_findings] expected: The package is instruction-only (one SKILL.md) so the regex-based scanner had no code files to analyze; this absence of findings is expected but not evidence of safety.
Assessment
This skill is coherent and lightweight, but before installing: 1) confirm you trust https://api.domaindetails.com (no homepage or source is provided); 2) avoid querying sensitive or unreleased brand names because each query is sent to that third-party API; 3) ensure curl/jq are available in your environment; 4) test with benign domains first to verify results and rate-limit behavior; and 5) prefer skills with clear provenance or official marketplace APIs if you need stronger auditability.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bcb8j7yvrg1k1y9vweqwxrd7yqtz1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💎 Clawdis
Binscurl

Comments