domain-search — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited domain-search (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Brainstorm brandable names and check which domains are actually available to register.
Availability is determined with RDAP — the official IETF successor to WHOIS (RFC 9082/9083). Query https://rdap.org/domain/<fqdn>, which routes to the responsible registry and returns:
This is authoritative and free. It is more reliable than scraping Instant Domain Search / GoDaddy, whose public endpoints change and rate-limit. RDAP tells you registered or not; it does not price premium/reserved names — confirm the final price at a registrar.
.io historically had no RDAP, and some ccTLDs still don't.UNKNOWN means "couldn't determine" — never report it as available.
.com, .ai, .net, .org, .app, .dev, .co work well via RDAP.scripts/check-domains.sh — batch checker. Always pass it as an explicit list (zsh does not word-split unquoted variables, so loop over arrays or pass args directly).
# Names × TLDs (cartesian):
bash scripts/check-domains.sh --tlds com,ai,app myname otherword
# Explicit FQDNs:
bash scripts/check-domains.sh acme.com acme.ai foo.io
# Machine-readable (for further processing):
bash scripts/check-domains.sh --json --tlds com,ai mynameOutput uses ✅ AVAILABLE / ❌ taken / ❓ unknown.
the user's memory/notes so names fit the actual positioning, audience, and tone.
words, compounds, and verb+suffix (-ly, -ify, -ish). Short single words are almost always taken on .com; compounds and coined words are where .com wins are found.
.com,.ai).preferred TLD. For each, give a one-line rationale (what it evokes) so the choice is informed.
(Cloudflare Registrar is at-cost and a good default if the user already uses Cloudflare).
.com and .ai; add .app/.io/.dev for developer-facing tools.before suggesting new purchases — reusing an owned domain is free.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.