Domain Trust Check

核心功能：依托Outtake Trust API，检测URL是否存在钓鱼、恶意软件、品牌滥用、诈骗等安全风险，支持单条及批量（最多50条）查询，返回包含判定结果、安全状态、威胁类别、处置建议的结构化数据。典型场景：访问未知链接前做安全检查、扫描邮件/消息中的可疑链接、验证域名是否涉钓鱼诈骗。需先注册获取API密钥，输入为URL，输出为JSON格式结果。

jamesouttake

热度 81.39

最近更新 2026-05-18 23:23:35

分类：安全依赖：代码执行 / 第三方 API

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add domain-trust-check

Metadata

name: domain-trust-check
description: URL safety scanner and domain reputation checker. Use when: checking if a URL is safe before visiting, scanning links in emails/messages, verifying domains for phishing/malware/scam. NOT for: submitting malicious domains for bounty rewards (use outtake-bounty-network).
metadata: {"openclaw":{"emoji":"🛡️","requires":{"env":["OUTTAKE_API_KEY"],"bins":["curl"]},"primaryEnv":"OUTTAKE_API_KEY","envVars":[{"name":"OUTTAKE_API_KEY","required":true,"description":"Outtake API key returned by agent registration."}],"homepage":"https://outtake.ai"}}

Domain Trust Check

Check any URL for phishing, malware, brand abuse, and scams before visiting or recommending it. Powered by the Outtake Trust API.

Quick Start

Already registered? If OUTTAKE_API_KEY is set, skip to the curl command. Do not re-register.

curl -s -X POST https://app.outtake.ai/api/v1/trust/check \
  -H "Authorization: Bearer $OUTTAKE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://suspicious-site.com"}'
# → {"data": {"url": "...", "verdict": "malicious", "confidence": 0.92, "safe_to_visit": "unsafe", "recommended_action": "block", "threat_categories": ["phishing"], ...}}

Registration

One-time setup. The same key works across all Outtake skills.

curl -s -X POST https://app.outtake.ai/api/v1/agent/register \
  -H "Content-Type: application/json" \
  -d '{"name": "my-agent", "email": "agent@example.com"}'

Save the returned api_key — it is only shown once:

export OUTTAKE_API_KEY="outtake_..."

Status	Meaning
409	Email already registered — use your existing key
429	Rate limited (5 registrations/hour)

Optional fields: wallet_address (Ethereum, needed for bounty payouts), agent_framework (e.g. "langchain").

Interpreting Results

verdict	safe_to_visit	Action
`malicious`	`unsafe`	Block. Do NOT visit. Warn the user.
`suspicious`	`safe` or `unsafe`	Warn the user. If `unsafe`, treat as malicious.
`safe`	`safe`	Safe to visit.
`unknown`	`unknown`	No data. Proceed with caution.

Confidence: 1.0 = human-reviewed, 0.7–0.99 = ML classification, 0.0 = no data.

Threat categories: The threat_categories array tells you why a domain was flagged:

Category	Verdict	Meaning
`phishing`	malicious	Fraudulent login pages stealing credentials
`malware`	malicious	Malicious downloads or exploit kits
`redirect_fraud`	malicious	Click fraud via deceptive redirects
`brand_abuse`	suspicious	Unauthorized use of brand identity
`policy_violation`	suspicious	Platform terms of service violations
`rights_of_publicity_violation`	suspicious	Unauthorized use of name/likeness
`domain_parking`	suspicious	Registered for resale or SEO spam
`legitimate`	safe	Normal, legitimate website

Empty array means no specific category (e.g. flagged by external threat feeds, or unknown domain).

Batch Checking

Check up to 50 URLs in one request using POST /trust/check-batch:

curl -s -X POST https://app.outtake.ai/api/v1/trust/check-batch \
  -H "Authorization: Bearer $OUTTAKE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"urls": ["https://link1.com", "https://link2.com"]}'

Use batch when checking 3+ URLs to reduce round trips. Requests with more than 50 URLs return 400.

Related Skills

outtake-bounty-network — Earn $5 USDC per verified novel malicious domain. Scan with trust-check to verify and enrich evidence; bounty submissions must be independently discovered novel domains. Domains copied from or already published by urlscan.io, PhishTank, URLhaus, OpenPhish, Google Safe Browsing, Spamhaus DBL, SURBL, Abuse.ch, VirusTotal, or comparable sources are not eligible. Same API key.

Support

Questions or feedback? Email trust-check@outtake.ai