RapidDNS

DNS reconnaissance and subdomain enumeration using rapiddns-cli (RapidDNS API). Use when: searching subdomains of a domain, reverse IP lookup, CIDR enumerati...

This skill is internally consistent: it documents installing a third‑party CLI and using a RapidDNS API key to perform DNS reconnaissance. Before installing or running commands: 1) verify the GitHub repository and release artifacts (use checksums/signatures if available) before running curl | tar | sudo mv; 2) avoid running binaries from unknown sources as root; 3) confirm where rapiddns-cli stores the API key (local config file) and whether it is stored encrypted; 4) use a dedicated RapidDNS API key with minimal permissions and be prepared to revoke it if needed; 5) be aware the CLI will contact rapiddns.io (see references/api.md) — do not supply other unrelated secrets to the tool. If you need greater assurance, ask the skill author for the repository URL, release checksums, or the exact config file path used to store API keys.

Type: OpenClaw Skill Name: rapiddns Version: 1.0.0 The skill provides instructions for DNS reconnaissance using the RapidDNS API, but it is classified as suspicious due to high-risk installation procedures in SKILL.md that involve downloading a binary via curl and executing sudo commands for installation. While these capabilities are plausibly needed for a CLI tool, they represent significant security risks (supply-chain and privilege escalation). Additionally, the _meta.json file contains an anomalous future-dated timestamp (March 2026), and there is a naming inconsistency in the installation instructions between the binary name ('rapiddns') and the command the agent is told to execute ('rapiddns-cli').