Phish Radar

Real-time phishing detection and brand monitoring MCP server. Analyzes URLs/domains for typosquatting, homoglyphs, suspicious certificates, and DNS anomalies...

Security Scan

The package and instructions are internally coherent for a phishing-detection/brand-monitoring tool, but there are a few ambiguous items you should be aware of (payment/hosting, runtime network access, and minor metadata inconsistencies).

Purpose & Capability

The name/description match the included code: handlers for phishing_detect, domain_trust and brand_monitor, DNS and SSL inspection utilities, and brand/TLD databases. The declared lack of required env vars and binaries is generally consistent with a pure-Node implementation that depends only on the Node standard library (dns, tls) and the apify SDK.

Instruction Scope

SKILL.md and README advertise both a hosted service (https://x402.ntriq.co.kr and Apify Store) and a local Node/Apify Actor implementation. That creates ambiguity: a user might assume analysis runs locally while the docs also point to a paid hosted API. The code itself performs network activity (DNS queries, TLS connections to arbitrary domains) which is expected for the stated purpose but can reveal internal hostnames or contact internal hosts if given internal names. The SKILL.md does not clearly state where analysis will run by default or whether calls to the provider's hosted endpoint happen when using the skill.

Install Mechanism

There is no explicit install spec in the skill registry (instruction-only), but the package includes source, package.json, and Apify Actor metadata. Dependencies are limited (apify). This is reasonable, but note that running locally requires npm install and Node 18+. No downloads from unknown third-party URLs are used by the code itself.

Credentials

The skill declares no required environment variables, which is consistent for code that uses only Node built-ins. However, the implementation references Apify Actor usage (Actor.charge(), apify push, apify call). Running on Apify or invoking the Actor API locally typically requires an APIFY_TOKEN or account login; the SKILL.md does not list that env var. Also beware that using the hosted service or Apify actor will incur the documented $0.05 per call.

Persistence & Privilege

The skill does not request elevated system presence: always is false, it does not claim to persistently modify other skills or system config, and dependencies are limited. Autonomous invocation is allowed (platform default) but there is no always:true or other privileged flags.

Assessment

This skill appears to do what it says (DNS/SSL checks, typosquat and homoglyph detection) and includes full source, so you can review or run it locally. Important considerations before installing or invoking it: 1) Billing/hosting: the README/IMPLEMENTATION mention a hosted endpoint and Apify pay-per-call ($0.05 per analysis). Confirm whether your agent will call the hosted service (which sends data to the provider) or run the code locally. 2) Network activity: the tool performs DNS queries and TLS connections to target domains. Do not point it at private/internal hostnames from an environment where leaking those results to a third party would be a risk. 3) Tokens: if you deploy or call the Apify Actor, you may need APIFY credentials or an account; these are not listed as required env vars in metadata. 4) Review code: source is included — if you are concerned about privacy or supply-chain risk, inspect the implementation (dns_client.js, handlers) and test on non-sensitive domains first. If you want higher assurance, run it locally in an environment you control and avoid using the hosted endpoint.

Real-time phishing detection and brand monitoring MCP server. Analyzes URLs/domains for typosquatting, homoglyphs, suspicious certificates, and DNS anomalies. Monitors for lookalike domains targeti...

Usage

Available on Apify Store and via x402 micropayments.

Service Catalog

curl https://x402.ntriq.co.kr/services

Features

• AI-powered analysis
• JSON structured output
• Pay-per-use pricing

Powered by

• ntriq Data Intelligence
• Apify Store