| name | website-fraud-check |
| description | Check if a website could be fraudulent |
| user-invocable | true |
| priority | true |
Website Fraud Check Skill
A skill for checking if a website could be fraudulent or pose security risks.
Description
This skill analyzes various factors to determine if a website might be fraudulent, including domain age, URL patterns, known blacklists, and other suspicious indicators. Note that having a valid SSL certificate does not guarantee a website is legitimate, as many fraudulent sites also possess valid certificates.
Implementation
When the user requests to check a website for fraud:
- Execute the fraud detection script:
nodejs {baseDir}/scripts/website_fraud_check.mjs [WEBSITE_URL]
- The script will:
- Check domain registration information and age
- Verify SSL certificate validity (without considering certificate age)
- Analyze URL patterns for suspicious characteristics
- Check against known threat intelligence feeds
- Examine website content for common phishing/fraud indicators
- Compare website content with known legitimate sites to detect impersonation attempts
- Assess overall risk level and provide recommendations
Usage
When the user says "check if [website] is fraudulent", "is [website] safe?", "check [website] for scams", or similar requests:
- Execute:
exec command="nodejs {baseDir}/scripts/website_fraud_check.mjs [WEBSITE_URL]"
- The script will analyze the website and return a risk assessment
- Display formatted results including:
- Risk level (Low/Medium/High/Critical)
- Specific risk factors detected
- Impersonation detection (which legitimate site it might be imitating)
- Recommendations for user safety
- Confidence level in the assessment
Dependencies
- nodejs: to run the fraud detection script
- internet connectivity: to connect to the target website and threat intelligence feeds
- whois: to check domain registration information
- OpenSSL: for SSL certificate validation
Error Handling
- Handle cases where the website is inaccessible
- Handle connection timeouts
- Handle invalid URLs
- Gracefully degrade when threat intelligence feeds are unavailable
- Provide best-effort assessment even with incomplete data
