← Back to Skills Marketplace
tedstonne

dotld

by tedstonne · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
426
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install dotld
Description
Search domain name availability and registration prices. Use when the user mentions domains, TLDs, domain registration, domain availability, or wants to find...
README (SKILL.md)

dotld — Domain Availability & Pricing

Installation

If dotld is not already available on the machine, install it:

curl -fsSL https://raw.githubusercontent.com/tedstonne/dotld/main/scripts/install.sh | bash

Prerequisites

dotld requires a Dynadot production API key. The key is resolved in this order:

  1. --dynadot-key \x3Ckey> flag (also auto-saves to config for future runs)
  2. DYNADOT_API_PRODUCTION_KEY environment variable
  3. Saved config at ~/.config/dotld/config.json

Get a key at: https://www.dynadot.com/account/domain/setting/api.html

If the key is missing, dotld exits with an error and a link to the key page.

Modes of Operation

Exact domain lookup

When the input contains a dot, dotld checks that specific domain:

dotld example.com

Output:

example.com · Taken

Or if available:

example.com · $9.99 · https://www.dynadot.com/domain/search?domain=example.com&rscreg=github

Keyword expansion

When the input has no dot, dotld auto-expands across 9 popular TLDs — com, net, org, io, ai, co, app, dev, sh:

dotld acme

Output:

acme
├─ acme.com · Taken
├─ acme.net · Taken
├─ acme.org · Taken
├─ acme.io  · $39.99 · https://www.dynadot.com/domain/search?domain=acme.io&rscreg=github
├─ acme.ai  · Taken
├─ acme.co  · Taken
├─ acme.app · Taken
├─ acme.dev · Taken
└─ acme.sh  · Taken

Multiple domains at once

Pass multiple arguments or use --file:

dotld acme.com startup.io mybrand

dotld --file domains.txt

Output Interpretation

  • domain · Taken — registered, not available
  • domain · $39.99 · https://... — available with registration price and buy link
  • Prices are in USD

Flags

Flag Description
--json Output structured JSON instead of the tree table
--file \x3Cpath> Read domains from a file (one per line)
--dynadot-key \x3Ckey> Provide API key (auto-saved to config)
--timeout \x3Cduration> Request timeout, e.g. 5s, 500ms (default: 10s)
--currency USD Currency for prices (only USD supported in v1)

Workflow Guidance

User has a specific domain → run exact lookup:

dotld coolstartup.com

User has a brand name or keyword → run keyword expansion:

dotld coolstartup

User wants to brainstorm → suggest name variations, then batch-check them:

dotld coolstartup launchpad rocketship

Present results as a ranked list: show available domains sorted by price, include buy links. Suggest next steps — open a buy link, check more TLDs, try name variations.

Batch from file → when the user has a list:

dotld --file domains.txt

Structured output → when parsing results programmatically:

dotld acme --json

Examples

Check if a domain is taken

$ dotld example.com
example.com · Taken

Explore TLDs for a keyword

$ dotld acme
acme
├─ acme.com · Taken
├─ acme.net · Taken
├─ acme.org · Taken
├─ acme.io  · $39.99 · https://www.dynadot.com/domain/search?domain=acme.io&rscreg=github
├─ acme.ai  · Taken
├─ acme.co  · Taken
├─ acme.app · Taken
├─ acme.dev · Taken
└─ acme.sh  · Taken

JSON output for scripting

$ dotld example.com --json
{
  "results": [
    {
      "domain": "example.com",
      "available": false,
      "price": null,
      "currency": "USD",
      "buyUrl": null,
      "cached": false,
      "quotedAt": "2026-02-21T00:00:00.000Z"
    }
  ]
}
Usage Guidance
This skill appears to do what it says (domain availability/pricing via Dynadot) but includes two practical risks you should weigh before installing: (1) the SKILL.md suggests installing dotld by piping a remote install script to bash — avoid running that blindly; instead inspect the install script first or install the binary from a trusted, reproducible source or package. (2) the CLI auto-saves any key passed via --dynadot-key to ~/.config/dotld/config.json with mode 0644, which can expose your API key to other local users; prefer setting DYNADOT_API_PRODUCTION_KEY in your environment (and not using --dynadot-key), or after installing, change the config file permissions (e.g., chmod 600) and inspect the config content. Additional precautions: review the referenced install script on GitHub before running it, run the installer in an isolated environment if possible, verify the dotld binary provenance (checksums/signatures if available), and revoke/regenerate your Dynadot key if you later suspect compromise.
Capability Analysis
Type: OpenClaw Skill Name: dotld Version: 1.0.1 The skill bundle is classified as suspicious due to the use of `curl -fsSL ... | bash` for installation in `SKILL.md`. This method introduces a significant supply chain risk, as it executes a remote script directly without prior inspection, making the system vulnerable to arbitrary code execution if the remote script at `https://raw.githubusercontent.com/tedstonne/dotld/main/scripts/install.sh` were to be compromised or maliciously altered. While the `allowed-tools: Bash(dotld*)` directive limits the agent's actions post-installation, the installation step itself bypasses this control and presents a critical vulnerability, not malicious intent from the skill itself.
Capability Assessment
Purpose & Capability
Name/description, required binary (dotld), and required environment variable (DYNADOT_API_PRODUCTION_KEY) align: a Dynadot API key is expected for live availability/pricing queries and the CLI is the tool the skill runs.
Instruction Scope
SKILL.md stays within the domain-focused scope (lookups, keyword expansion, JSON output). However it explicitly instructs users to install the tool by piping a remote script to bash (curl -fsSL https://raw.githubusercontent.com/tedstonne/dotld/main/scripts/install.sh | bash), which expands the runtime actions beyond just using the CLI and introduces execution of remote code.
Install Mechanism
There is no formal install spec in the registry metadata, but the README recommends downloading and executing a script directly from raw.githubusercontent.com via a curl | bash pipeline. While GitHub raw is a common host, piping a remote script to a shell is a high-risk pattern because it executes code fetched at install time without local review.
Credentials
Requesting a single Dynadot production API key is proportionate to the stated purpose. The README also documents auto-saving keys to ~/.config/dotld/config.json with file mode 0644 (world-readable by default on many systems), which raises privacy/secret-storage concerns — the skill will persist the credential in plaintext unless the user avoids using --dynadot-key or changes permissions.
Persistence & Privilege
The skill does not request always:true or system-wide privileges. It does create and write its own config file under the user's home (~/.config/dotld/config.json) when a key is provided via --dynadot-key. Writing its own config is normal, but users should be aware the key may be persisted automatically.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install dotld
  3. After installation, invoke the skill by name or use /dotld
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
dotld 1.0.1 → 1.0.7 - Added installation instructions for the dotld CLI tool. - Updated buy links to include a referral parameter (`&rscreg=github`). - No changes to usage, features, or output structure.
v1.0.0
dotld 1.0.0 – Initial Release - Search domain name availability and real-time registration prices via Dynadot API. - Supports exact domain lookup, keyword expansion across popular TLDs, and batch checking. - Outputs results in human-readable or JSON formats, with prices and purchase links for available domains. - CLI flags for file input, API key management, timeout, and output customization. - Designed for both end-users and programmatic usage.
Metadata
Slug dotld
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is dotld?

Search domain name availability and registration prices. Use when the user mentions domains, TLDs, domain registration, domain availability, or wants to find... It is an AI Agent Skill for Claude Code / OpenClaw, with 426 downloads so far.

How do I install dotld?

Run "/install dotld" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is dotld free?

Yes, dotld is completely free (open-source). You can download, install and use it at no cost.

Which platforms does dotld support?

dotld is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created dotld?

It is built and maintained by tedstonne (@tedstonne); the current version is v1.0.1.

💬 Comments