← 返回 Skills 市场
tedstonne

dotld

作者 tedstonne · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
426
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install dotld
功能描述
Search domain name availability and registration prices. Use when the user mentions domains, TLDs, domain registration, domain availability, or wants to find...
使用说明 (SKILL.md)

dotld — Domain Availability & Pricing

Installation

If dotld is not already available on the machine, install it:

curl -fsSL https://raw.githubusercontent.com/tedstonne/dotld/main/scripts/install.sh | bash

Prerequisites

dotld requires a Dynadot production API key. The key is resolved in this order:

  1. --dynadot-key \x3Ckey> flag (also auto-saves to config for future runs)
  2. DYNADOT_API_PRODUCTION_KEY environment variable
  3. Saved config at ~/.config/dotld/config.json

Get a key at: https://www.dynadot.com/account/domain/setting/api.html

If the key is missing, dotld exits with an error and a link to the key page.

Modes of Operation

Exact domain lookup

When the input contains a dot, dotld checks that specific domain:

dotld example.com

Output:

example.com · Taken

Or if available:

example.com · $9.99 · https://www.dynadot.com/domain/search?domain=example.com&rscreg=github

Keyword expansion

When the input has no dot, dotld auto-expands across 9 popular TLDs — com, net, org, io, ai, co, app, dev, sh:

dotld acme

Output:

acme
├─ acme.com · Taken
├─ acme.net · Taken
├─ acme.org · Taken
├─ acme.io  · $39.99 · https://www.dynadot.com/domain/search?domain=acme.io&rscreg=github
├─ acme.ai  · Taken
├─ acme.co  · Taken
├─ acme.app · Taken
├─ acme.dev · Taken
└─ acme.sh  · Taken

Multiple domains at once

Pass multiple arguments or use --file:

dotld acme.com startup.io mybrand

dotld --file domains.txt

Output Interpretation

  • domain · Taken — registered, not available
  • domain · $39.99 · https://... — available with registration price and buy link
  • Prices are in USD

Flags

Flag Description
--json Output structured JSON instead of the tree table
--file \x3Cpath> Read domains from a file (one per line)
--dynadot-key \x3Ckey> Provide API key (auto-saved to config)
--timeout \x3Cduration> Request timeout, e.g. 5s, 500ms (default: 10s)
--currency USD Currency for prices (only USD supported in v1)

Workflow Guidance

User has a specific domain → run exact lookup:

dotld coolstartup.com

User has a brand name or keyword → run keyword expansion:

dotld coolstartup

User wants to brainstorm → suggest name variations, then batch-check them:

dotld coolstartup launchpad rocketship

Present results as a ranked list: show available domains sorted by price, include buy links. Suggest next steps — open a buy link, check more TLDs, try name variations.

Batch from file → when the user has a list:

dotld --file domains.txt

Structured output → when parsing results programmatically:

dotld acme --json

Examples

Check if a domain is taken

$ dotld example.com
example.com · Taken

Explore TLDs for a keyword

$ dotld acme
acme
├─ acme.com · Taken
├─ acme.net · Taken
├─ acme.org · Taken
├─ acme.io  · $39.99 · https://www.dynadot.com/domain/search?domain=acme.io&rscreg=github
├─ acme.ai  · Taken
├─ acme.co  · Taken
├─ acme.app · Taken
├─ acme.dev · Taken
└─ acme.sh  · Taken

JSON output for scripting

$ dotld example.com --json
{
  "results": [
    {
      "domain": "example.com",
      "available": false,
      "price": null,
      "currency": "USD",
      "buyUrl": null,
      "cached": false,
      "quotedAt": "2026-02-21T00:00:00.000Z"
    }
  ]
}
安全使用建议
This skill appears to do what it says (domain availability/pricing via Dynadot) but includes two practical risks you should weigh before installing: (1) the SKILL.md suggests installing dotld by piping a remote install script to bash — avoid running that blindly; instead inspect the install script first or install the binary from a trusted, reproducible source or package. (2) the CLI auto-saves any key passed via --dynadot-key to ~/.config/dotld/config.json with mode 0644, which can expose your API key to other local users; prefer setting DYNADOT_API_PRODUCTION_KEY in your environment (and not using --dynadot-key), or after installing, change the config file permissions (e.g., chmod 600) and inspect the config content. Additional precautions: review the referenced install script on GitHub before running it, run the installer in an isolated environment if possible, verify the dotld binary provenance (checksums/signatures if available), and revoke/regenerate your Dynadot key if you later suspect compromise.
功能分析
Type: OpenClaw Skill Name: dotld Version: 1.0.1 The skill bundle is classified as suspicious due to the use of `curl -fsSL ... | bash` for installation in `SKILL.md`. This method introduces a significant supply chain risk, as it executes a remote script directly without prior inspection, making the system vulnerable to arbitrary code execution if the remote script at `https://raw.githubusercontent.com/tedstonne/dotld/main/scripts/install.sh` were to be compromised or maliciously altered. While the `allowed-tools: Bash(dotld*)` directive limits the agent's actions post-installation, the installation step itself bypasses this control and presents a critical vulnerability, not malicious intent from the skill itself.
能力评估
Purpose & Capability
Name/description, required binary (dotld), and required environment variable (DYNADOT_API_PRODUCTION_KEY) align: a Dynadot API key is expected for live availability/pricing queries and the CLI is the tool the skill runs.
Instruction Scope
SKILL.md stays within the domain-focused scope (lookups, keyword expansion, JSON output). However it explicitly instructs users to install the tool by piping a remote script to bash (curl -fsSL https://raw.githubusercontent.com/tedstonne/dotld/main/scripts/install.sh | bash), which expands the runtime actions beyond just using the CLI and introduces execution of remote code.
Install Mechanism
There is no formal install spec in the registry metadata, but the README recommends downloading and executing a script directly from raw.githubusercontent.com via a curl | bash pipeline. While GitHub raw is a common host, piping a remote script to a shell is a high-risk pattern because it executes code fetched at install time without local review.
Credentials
Requesting a single Dynadot production API key is proportionate to the stated purpose. The README also documents auto-saving keys to ~/.config/dotld/config.json with file mode 0644 (world-readable by default on many systems), which raises privacy/secret-storage concerns — the skill will persist the credential in plaintext unless the user avoids using --dynadot-key or changes permissions.
Persistence & Privilege
The skill does not request always:true or system-wide privileges. It does create and write its own config file under the user's home (~/.config/dotld/config.json) when a key is provided via --dynadot-key. Writing its own config is normal, but users should be aware the key may be persisted automatically.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install dotld
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /dotld 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
dotld 1.0.1 → 1.0.7 - Added installation instructions for the dotld CLI tool. - Updated buy links to include a referral parameter (`&rscreg=github`). - No changes to usage, features, or output structure.
v1.0.0
dotld 1.0.0 – Initial Release - Search domain name availability and real-time registration prices via Dynadot API. - Supports exact domain lookup, keyword expansion across popular TLDs, and batch checking. - Outputs results in human-readable or JSON formats, with prices and purchase links for available domains. - CLI flags for file input, API key management, timeout, and output customization. - Designed for both end-users and programmatic usage.
元数据
Slug dotld
版本 1.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 2
常见问题

dotld 是什么?

Search domain name availability and registration prices. Use when the user mentions domains, TLDs, domain registration, domain availability, or wants to find... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 426 次。

如何安装 dotld?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install dotld」即可一键安装,无需额外配置。

dotld 是免费的吗?

是的,dotld 完全免费(开源免费),可自由下载、安装和使用。

dotld 支持哪些平台?

dotld 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 dotld?

由 tedstonne(@tedstonne)开发并维护,当前版本 v1.0.1。

💬 留言讨论