io.github.entradox/perimeter-watch-scanner

Perimeter Watch

Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools

1.0.0
Version
remote
Transport
6
Tools

Security review

Review passed

Reviewed 22h ago.

  • tools: 6 tools scanned
  • metadata: scanned

No findings.

Tools (6)

  • pw_health

    Liveness check for the Perimeter Watch API. Returns ok, service, version. Call first to verify connectivity before pw_snapshot.

  • pw_snapshot

    Run a free one-time external-perimeter scan on a domain you control. Checks TLS certificate expiry, domain renewal status, dangling CNAME takeover risk, and CT-log lookalike domains. Returns a rating plus per-check detail. NOT idempotent (each call consumes rate limit); takes 20-60s; rate-limited to 3 scans per IP per 24h. Args: domain: the domain to scan (e.g. example.com) authority: MUST be true — attests you or your principal own/manage this domain. Scanning third-party domains without authority is prohibited. Scan takes 20-60s. Rate limit: 3/IP/24h.

  • pw_watch_status

    Check whether a domain is enrolled on a paid weekly monitoring plan. Returns enrollment status. Paid plans add weekly re-scans with email briefs. Read-only lookup. Args: domain: the domain to look up (e.g. example.com)

  • pw_stats

    Service funnel counters: page views, snapshots run, paid registrations. Read-only.

  • skills_list_tool

    List this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body with `read_skill`.

  • read_skill

    Read a product skill file by its skill:// URI. Args: uri: e.g. skill://<product>/<skill-name>/SKILL.md Get valid URIs from `skills_list_tool`.