ClawHub

DomainKits - domain name data and insights

v2.0.4

Check availability. Search related domains. Find more possibilities. Explore connections. Turn AI into your domain agent.

⭐ 5· 2.8k·2 current·2 all-time
by@abtdomain
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the declared capabilities (availability checks, search, trends, analysis). The single primary credential (DOMAINKITS_API_KEY) is appropriate for an external API service. No unrelated binaries, config paths, or credentials are requested.
✓
Instruction Scope
SKILL.md instructs the agent to call the DomainKits MCP endpoints and use the listed tools (availability, whois, dns, etc.). There are no instructions to read local files, harvest unrelated environment variables, or exfiltrate data to unexpected endpoints. It does instruct the agent to disclose affiliate links and use memory-backed personal tools when available (memory is off by default).
✓
Install Mechanism
No install spec or code files are present (instruction-only skill), so nothing is downloaded or written to disk by the skill itself — minimal install risk.
ℹ
Credentials
The skill declares DOMAINKITS_API_KEY as its primary credential, which is proportionate for API access. Minor inconsistency: registry metadata lists 'Required env vars: none' while primaryEnv is set; SKILL.md also notes the service 'works without API key' (guest mode). This is plausible (API key optional for higher limits) but worth confirming before providing a key.
✓
Persistence & Privilege
always:false (not forced into every agent run). The skill exposes memory-backed personal tools (preferences, monitor, strategy), but notes memory is off by default. The skill does not request system-wide config changes or elevated privileges.
Assessment
This skill appears coherent for domain research. Before enabling or providing an API key: (1) confirm the official DomainKits endpoint and GitHub repo links match the service you expect, (2) only give DOMAINKITS_API_KEY if you trust the service and understand its scopes/quotas, (3) verify the affiliate-link disclosure and whether you’re comfortable with that behavior, and (4) remember memory features can store preferences/monitors — keep memory off if you don't want the agent to retain domain watchlists or keys. If anything seems off, test the skill in a limited account/guest mode first and monitor API usage.

Like a lobster shell, security has layers — review code before you run it.

latestvk970rbr37n3ddpctw6cch8k1sd83k2qc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌐 Clawdis
Primary envDOMAINKITS_API_KEY

Comments