Subdomain Takeover Checker

Check subdomains for potential takeover vulnerabilities. Detects dangling DNS records pointing to unclaimed services (GitHub Pages, Heroku, AWS, etc.)

This skill is coherent with its stated purpose, but check these before installing: (1) The script uses curl for HTTP verification but curl is not declared in the metadata—ensure curl is available on the host. (2) The tool performs network scans of domains you supply; avoid scanning domains you don't have permission to test (legal/ethical risk). (3) Expect false positives because the script uses simple substring matching of CNAMEs and treats HTTP timeouts/404s as potentially claimable. (4) If you will run this in an automated agent, run it in an environment with controlled network access and review output files before sharing. If you need stronger verification, consider enhancing the script to use provider-specific claim checks or safer heuristics.

Type: OpenClaw Skill Name: subdomain-takeover Version: 1.0.0 The skill is a legitimate security utility designed to identify dangling DNS records (subdomain takeover vulnerabilities). The core logic in `scripts/check-takeover.sh` uses standard tools like `dig` and `curl` to verify CNAME records against a list of known vulnerable services (e.g., GitHub Pages, Heroku, AWS). There is no evidence of data exfiltration, malicious execution, or prompt injection intended to subvert the agent's behavior.