Look up domain WHOIS/RDAP info and check marketplace listings. Free API, no auth required.

This skill appears to do what it says (curl two public endpoints and parse JSON), but: (1) confirm the API hostnames (mcp.domaindetails.com, api.domaindetails.com) are trustworthy — the skill has no homepage or known publisher; (2) the SKILL.md uses curl and jq but the registry metadata doesn't list required binaries — ensure your environment has curl/jq before use; (3) avoid running 'npx domaindetails' unless you inspect the npm package first, because npx will download and execute code from the npm registry; (4) ask the skill author for provenance (homepage, source repo, or package manifest) and for the declared required binaries to be aligned with SKILL.md; and (5) if you plan to query sensitive domains, remember requests go to the external API (no local-only lookup). If you cannot verify the service origins, treat the skill as untrusted and prefer manual curl calls to inspect responses before automating.

Type: OpenClaw Skill Name: domaindetails Version: 1.2.0 The skill bundle is benign. It provides clear instructions for an AI agent to use `curl` to query `domaindetails.com` for domain information and marketplace listings, which aligns perfectly with its stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts, or obfuscation. The `curl` binary is required for network access, but its usage is limited to the specified API endpoints and is necessary for the skill's functionality.