skills/mukul975/anthropic-cybersecurity-skills/analyzing-typosquatting-domains-with-dnstwist/Gen Agent Trust Hub
analyzing-typosquatting-domains-with-dnstwist
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill correctly implements wrappers for the legitimate 'dnstwist' security tool.
- [COMMAND_EXECUTION]: The skill executes the 'dnstwist' CLI using subprocess.run with list-based arguments. This practice prevents command injection by ensuring that user-provided domain names are not interpreted by a shell.
- [EXTERNAL_DOWNLOADS]: References the installation of the 'dnstwist' package, which is a well-known open-source tool for cybersecurity monitoring. The package is sourced from standard registries (PyPI).
Audit Metadata