Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add oborseth/Porkbun-MCP --skill change-dns-safelygit clone --depth 1 https://github.com/oborseth/Porkbun-MCPWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/oborseth/porkbun-mcp/change-dns-safely)<a href="https://agentmods.dev/skills/oborseth/porkbun-mcp/change-dns-safely"><img src="https://agentmods.dev/badge/skills/oborseth/porkbun-mcp/change-dns-safely/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/oborseth/porkbun-mcp/change-dns-safely"><img src="https://agentmods.dev/badge/skills/oborseth/porkbun-mcp/change-dns-safely.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00093 | $0.00764 |
| Opus 5.5 | $0.00037 | $0.00306 |
| Sonnet 5 | $0.00019 | $0.00153 |
| Haiku 4.5 | $0.00009 | $0.00076 |
Grade A, and why
change-dns-safely scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Change DNS on a Porkbun domain safely
DNS mistakes take a site or email down, and caches keep the wrong answer for a while after it is fixed. Work from what is there now, say what you will change, and keep the way back open.
Every change
- Read first. Call
list_dns_recordsfor the domain. Look for records that clash with the one you plan to add: a CNAME cannot share a name with any other record, and a domain should have only one SPF (v=spf1) TXT record. - Say the change, and ask. Tell the user which records you will add, change or delete, with type, host, value and TTL. Wait for their OK before any write, and before any delete in particular.
- Write. Use
create_dns_record,update_dns_recordordelete_dns_record. Forname, pass only the subdomain part (www, notwww.example.com), or leave it empty for the domain itself. - Pass on
warnings. A write can succeed with a warning, for example that the domain uses other nameservers, so the record is saved but has no effect yet. Tell the user; do not report plain success.
Pointing a domain at a host
Use the exact records the host shows in its own domain settings: typically an
A record (or ALIAS) for the domain itself and a CNAME for www. Remove the
records they replace only after the user agrees. If the domain has URL
forwarding (list_url_forwards), it can conflict with the new records;
mention it.
Bigger changes: check first
Before changing nameservers, turning on DNSSEC, or moving the domain to
another provider, call preflight_domain. It changes nothing. Read its
blockers to the user first: those will break something, such as mail records
that would stop resolving after a nameserver change. Then its warnings.
Undo
Porkbun saves restore points of the zone before changes (the first write in each hour, and before bulk imports). If none exist for the time you need, say so rather than guessing at the old records.
list_dns_restore_pointsto find the version from before the problem.diff_dns_restore_pointand show the user what would change.restore_dns_zone, after their OK. By default it only adds back what is missing. Passprune: trueto also remove records added since, and only after going through theextralist with the user.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 63 lines · 93 tokens per session scan A 1ee3be05222b
change-dns-safely is a skill published in the GitHub repository oborseth/Porkbun-MCP (32 stars, last pushed yesterday), licensed MIT. It adds 93 tokens to every session and 764 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-26.
Other skills, from other repositories
architecture-diagram
WHAT — Create polished dark-themed architecture diagrams as self-contained HTML+SVG files (inline SVG, CSS styling, PNG/PDF export toolbar). Use when the user asks for system, infrastructure, cloud, security, or network topology diagrams rendered as a shareable visual artifact rather than code.
aws-well-architected-review
WHAT — AWS Well-Architected Framework review (6 pillars) — operational excellence, security, reliability, performance, cost, sustainability + WAR process. Checklist for workload evaluation on AWS; complementary to official AWS MCP for live account data.
cloud-design-patterns
WHAT — Vendor-neutral distributed cloud patterns (Retry, Bulkhead, Circuit Breaker, CQRS, Event Sourcing, etc.) abstracted from AWS/Azure/GCP sources — when to apply, tradeoffs, mapping to AWS/GCP/Azure primitives. Offline checklist, no live account required.
upload-image-s3
Upload a local image file to S3-compatible storage (Cloudflare R2, AWS S3, MinIO, DigitalOcean Spaces) and return the public URL. Use whenever the user asks to "upload this image", "host this file", "get a public URL for X", "put this image online", "upload to R2", "upload to S3", or wants to make a local image…
api-workers
Cloudflare Workers deployment using createWorkerHandler from @cyanheads/mcp-ts-core/worker. Covers the full handler signature, binding types, CloudflareBindings extensibility, runtime compatibility guards, and wrangler.toml requirements.
robtex-crypto
Bitcoin and Lightning Network analysis — address balances, transaction tracing, block inspection, Lightning node/channel data, peer recommendations.