catchdoms-expired-domains

Security Findings (82)

• HighAS-002

  ⚠️Excessive Permissions ×7

  tool declares network permission

  ud_domains_searchud_cart_add_domain_afternicud_cart_add_domain_sedoud_cart_add_payment_method_urlud_cart_get_urlud_dns_hosting_listud_dns_hosting_add

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• MediumAS-002

  ⚠️Excessive Permissions ×18

  tool declares db permission

  ud_domains_searchud_leads_listud_lead_get

  tool declares fs permission

  ud_portfolio_listud_contact_createud_cart_removeud_listing_createud_listing_updateud_dns_record_updateud_dns_record_removeud_dns_records_remove_allud_dns_nameservers_set_defaultud_dns_hosting_listud_dns_hosting_removeud_domain_auto_renewal_updateud_domain_tags_removeud_domain_flags_updateud_domain_push

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×10

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  ud_domains_searchud_cart_add_domain_afternicud_cart_add_domain_sedoud_cart_add_payment_method_urlud_cart_checkoutud_cart_get_urlud_lead_message_sendud_dns_hosting_listud_dns_hosting_addud_domain_auto_renewal_update

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions ×4

  input schema exposes 13 properties (threshold: 10)

  ud_portfolio_list

  tool declares http permission

  ud_cart_checkoutud_lead_message_sendud_domain_auto_renewal_update

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×43

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  ud_domains_searchud_tld_listud_portfolio_listud_contacts_listud_contact_createud_cart_getud_cart_add_domain_registrationud_cart_add_domain_listedud_cart_add_domain_afternicud_cart_add_domain_sedoud_cart_add_domain_renewalud_cart_removeud_cart_get_payment_methodsud_cart_add_payment_method_urlud_cart_checkoutud_cart_get_urlud_listing_createud_listing_updateud_listing_cancelud_offers_listud_offer_respondud_leads_listud_lead_getud_lead_messages_listud_lead_message_sendud_dns_records_listud_dns_record_addud_dns_record_updateud_dns_record_removeud_dns_records_remove_allud_dns_nameservers_listud_dns_nameservers_set_customud_dns_nameservers_set_defaultud_dns_hosting_listud_dns_hosting_addud_dns_hosting_removeud_domain_pending_operationsud_domain_auto_renewal_updateud_domain_getud_domain_tags_addud_domain_tags_removeud_domain_flags_updateud_domain_push

  Fix: Review and remediate the identified issue.