mcp-domain-intel

Domain intelligence — WHOIS lookups and domain availability checks via L402 API. Use for brand research, cybersecurity investigations, and domain acquisition...

This skill's purpose (WHOIS and availability checks) is consistent with the code, but there are clear mismatches you should resolve before installing: - SKILL.md/README ask you to set L402_API_BASE_URL, but the program actually reads NAUTDEV_BASE_URL and otherwise defaults to https://api.nautdev.com. If you intend to point the tool at a private L402 endpoint, set NAUTDEV_BASE_URL instead (or verify the package behavior). - Tool names differ between the docs (whois_lookup / check_availability) and the code (lookup / available). Make sure the agent will call the correct tool names. - The package naming in docs (different author/namespace variants) is inconsistent; verify the exact npm package you will run (e.g., @vbotholemu/mcp-domain-intel) and inspect its npm publisher and repository before running via npx. Recommendations before installing: - Inspect the package on the npm registry (publisher, versions, README, repository) and preferably the source repo to confirm origin and integrity. - Test in an isolated environment; run the binary with NAUTDEV_BASE_URL pointed to a known test endpoint to confirm behavior. - Do not provide secrets or payment credentials to this skill until you confirm the service's billing/micropayment model and trust the publisher. If the publisher/repo is not verifiable or these inconsistencies are not corrected, treat the skill as untrusted.

Type: OpenClaw Skill Name: mcp-domain-intel Version: 1.0.0 The skill provides domain WHOIS and availability intelligence by wrapping the L402 API at api.nautdev.com. The implementation in src/index.ts is a standard Model Context Protocol (MCP) server that uses fetch to query specific endpoints with sanitized inputs. While there are minor documentation inconsistencies regarding environment variable names (L402_API_BASE_URL vs NAUTDEV_BASE_URL) and tool names between SKILL.md and the source code, there is no evidence of malicious intent, data exfiltration, or unauthorized execution.