domain-lookup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited domain-lookup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use the domain-whois-mcp tools to answer questions about domain names.
If the user is brainstorming a project name, route to the project-name-finder skill instead.
| User Intent | Tool | Key Parameters |
|---|---|---|
| "Who owns example.com?" | whois_lookup | domain |
| "Is example.com available?" | domain_check | domain, method=auto |
| "Check these 10 domains" | bulk_domain_check | domains, concurrency |
| "RDAP info for example.com" | rdap_lookup | domain |
| "What WHOIS server handles .xyz?" | tld_info | tld |
| "Send raw WHOIS to specific server" | whois_raw | query, server |
| "Which TLDs support RDAP?" | rdap_bootstrap_info | filter (optional) |
| "Find WHOIS server for .tr" | find_whois_server | domain |
Use domain_check with method auto. It tries RDAP first (faster), falls back to WHOIS.
bulk_domain_check({
domains: ["brand.com", "brand.io", "brand.dev", "brand.ai", "brand.co"],
concurrency: 5
})whois_lookup for WHOIS text + parsed fields, rdap_lookup for structured JSON.
Call tld_info first, then pick the appropriate lookup tool based on what it reports.
clientTransferProhibited, serverDeleteProhibited indicate registry locksDNSSEC: signedDelegation means the domain uses DNSSECrdap_bootstrap_info)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.