Back to skill

Security audit

QName CLI

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrow, disclosed guide for using QName.AI domain lookups and does not include hidden code or automatic execution.

Install this if you want agents to query QName.AI for individual domain lookups. Use an approved API key, prefer environment variables for temporary sessions, and only reveal stored secrets when you intentionally inspect local configuration.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.