Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Domain/DNS Ops (Peter) · LeoYeAI | DecimalAI

Domain DNS Ops

SkillScore50Maintained

domain-dns-ops

This skill is a thin router: use `~/Projects/manager` as truth, run the repo scripts, follow the checklists.

DevOpsby LeoYeAI

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

DevOps & SRE pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/domain-dns-ops/SKILL.md

decimalai skills pull domain-dns-ops --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/domain-dns-ops/SKILL.md https://app.decimal.ai/s/domain-dns-ops/SKILL.md

Raw file: /s/domain-dns-ops/SKILL.md ↗ · machine-readable summary at /s/domain-dns-ops.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

24 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 56d ago

Yes — +46% lift-10% tokens0% turns50% of whole cases pass with skill (12/24)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-16	✗→✓	▲ Improved	—	—
case-20	✗→✓	▲ Improved	—	—
case-05	✗→✓	▲ Improved	—	—
case-01	✗→✓	▲ Improved	—	—
case-04	✗→✓	▲ Improved	—	—

Showing 5 of 24 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 7/30/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

LeoYeAI / openclaw-master-skills

skills/domain-dns-ops/SKILL.md

View on GitHub ↗

License MITImported 8/2/2026Version v1Bundled 1 file

Skill contents

references/

SKILL.md

Domain/DNS Ops (Peter)

This skill is a thin router: use ~/Projects/manager as truth, run the repo scripts, follow the checklists.

Source of truth (read first)

~/Projects/manager/DOMAINS.md (domain -> target map; registrar hints; exclusions)
~/Projects/manager/DNS.md (Cloudflare onboarding + DNS/redirect checklist)
~/Projects/manager/redirect-worker.ts + ~/Projects/manager/redirect-worker-mapping.md (worker redirects)

Golden path (new vanity domain -> Cloudflare -> redirect)

Decide routing model

Page Rule redirect (small scale, per-zone).
Rulesets / Bulk Redirects (account-level; needs token perms).
Worker route (fallback; uses redirect-worker).

Cloudflare zone

Create zone (UI), then confirm with cli4:
cli4 --get name=example.com /zones

Nameservers

If registrar = Namecheap: cd ~/Projects/manager && source profile && bin/namecheap-set-ns example.com emma.ns.cloudflare.com scott.ns.cloudflare.com
If registrar = DNSimple: see ~/Projects/manager/DNS.md for delegation API notes.

DNS placeholders (so CF can terminate HTTPS)

Proxied apex A + wildcard A → 192.0.2.1 (see ~/Projects/manager/DNS.md for exact cli4 calls).

Redirect

If using Page Rules: use the cli4 --post ... /pagerules template from ~/Projects/manager/DNS.md.
If using Worker: update mapping (~/Projects/manager/redirect-worker-mapping.md), deploy/bind routes per ~/Projects/manager/DNS.md.

Verify

DNS: dig +short example.com @1.1.1.1 (expect CF anycast).
HTTPS redirect: curl -I https://example.com (expect 301).

Common ops

Cloudflare token sanity: source ~/.profile (prefer CLOUDFLARE_API_TOKEN; CF_API_TOKEN fallback).
Disable “Block AI bots”: cd ~/Projects/manager && source profile && bin/cloudflare-ai-bots status / bin/cloudflare-ai-bots disable.

After edits (commit/push)

If you changed anything in ~/Projects/manager (docs, worker, scripts, mappings): commit there too.

Review: cd ~/Projects/manager && git status && git diff
Stage: git add <paths>
Commit (Conventional Commits): git commit -m "feat: …" / fix: / docs: / chore:
Push only when explicitly asked: git push origin main

Guardrails

Don’t touch .md lore domains or steipete.md unless explicitly asked; check ~/Projects/manager/DOMAINS.md.
Confirm registrar before debugging CF “invalid nameservers” (often “wrong registrar”).
Prefer reversible steps; verify after each change (NS → DNS → redirect).

Illustrative Want to see what domain-dns-ops would put in front of your model? Preview the rendered body and check its trigger phrases — no LLM call, no signup.

Latest benchmark · publisher runVerified

7/27/2026, 09:16 UTC · 24 cases

Lift

+46%

50% vs 4%

Agent turns

0%

1.0 vs 1.0

Tokens

-11%

1,353.27 vs 1,512.23

fail → pass · 11pass → pass · 1fail → fail · 12

Per-case results (24)

Case	Status	Duration (ms)			Turns			Tokens			Tool calls
Case	Status	Without	With	Δ	Without	With	Δ	Without	With	Δ	Without	With	Δ
case-12 Before running git status or staging changes after making edits to redirect scripts, in which exact directory path must git operations be performed?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-16 Cloudflare is showing an 'invalid nameservers' error for a domain we just added. What primary registrar check should be completed before deep debugging Cloudflare settings?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-10 What cURL flag combination should be used to inspect HTTP headers and confirm a 301 redirect response on https://example.com without downloading the response body?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-20 Before calling `bin/namecheap-set-ns`, which directory must be entered and sourced to ensure environment configuration is loaded?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-05 After creating a new Cloudflare zone in the dashboard for `app-test-domain.io`, what CLI command should be executed to confirm zone creation details via the Cloudflare API tool?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-13 I just committed a fix to the DNS documentation in ~/Projects/manager. Should I immediately push the commit to origin main?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-01 I just registered `newvanitydomain.com` via Namecheap and want to redirect all incoming web traffic to `mainproduct.com`. Please handle the full Cloudflare onboarding, point the Namecheap nameservers to Cloudflare, set up the initial DNS placeholder records, configure the redirect, and test it. Provide a summary of each step taken along with the final HTTP status code verification.	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-04 We need to check the default domain target mapping list and registrar notes before performing domain operations. Which specific documentation file in ~/Projects/manager stores the authoritative mapping of domains to target destinations and registrar hints?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-09 Which exact command-line tool call using Cloudflare's public resolver (1.1.1.1) should be executed to check that domain DNS has successfully resolved to Cloudflare's network?	pass→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-17 We need to set up a quick 1:1 path redirect for a single zone with minimal complexity. Which Cloudflare routing feature model is designated for small-scale, per-zone redirects?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-14 Where are the delegation API instructions stored when setting up nameservers for a domain registered through DNSimple?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-11 Should I set CF_API_TOKEN or CLOUDFLARE_API_TOKEN in my shell environment for Cloudflare authentication? Which variable name takes precedence when both might be present?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-02 Our AI scraper integration is failing because Cloudflare might be filtering crawler requests. Could you check the current 'Block AI bots' status across our managed environment, turn off the AI bot blocking setting, and report back with the status output before and after the change?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-15 I see `steipete.md` in the repo context. Should I update the domain records for lore domains listed in `steipete.md` while setting up standard redirects?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-19 Which TypeScript source file implements the Cloudflare Worker redirect handler in our management repository?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-21 In what order should verification steps be performed when onboarding a new domain redirect?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-07 What specific set of A records must be created as proxy placeholders when onboarding a new redirect zone to Cloudflare?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-18 When choosing the Worker route fallback option for complex redirects, which file must be updated to store the key-value redirect path mappings?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-03 I need to add a new domain redirect mapping pointing `legacy-portal.org` to `new-portal.com` in our management repo. Please update the redirect mapping documentation and configuration, verify the changes, and record a git commit following our repository conventions without pushing to origin. Return the git diff summary and commit details.	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-22 We are migrating an enterprise domain to AWS Route53. How do we configure alias records for Route53 latency-based routing in the AWS Management Console?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-06 When setting up dummy DNS records on Cloudflare so that Cloudflare can terminate HTTPS for a vanity redirect domain, what specific IPv4 address should be assigned to the proxied apex A record?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-08 When setting up a simple zone-level redirect using cli4 with Page Rules, which Cloudflare API path endpoint is posted to?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-23 I am configuring a self-hosted BIND9 primary DNS server. What is the correct zone file syntax for defining SOA and NS records in /etc/bind/db.example.com?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-24 How do I configure a permanent 301 redirect from HTTP to HTTPS for server_name example.com inside an NGINX server block configuration file?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—

These cases were also screened by the skill’s intent / safety pass.See the Trust review ↗Reproduce this benchmark in Colab ↗

How this skill was measured

DecimalAI ran this skill against gemini-3.6-flash twice over the same eval suite — once with the skill loaded and once without — and compared the two runs case by case. 24 cases were attempted, and 22 counted toward the lift figure. The other 2 produced results that are not comparable between the two arms, so they are excluded from the headline rather than averaged into it. The headline lift of +46 percentage points is the difference between those two pass rates over the 22 comparable cases.

Model measured: gemini-3.6-flash
Graded by: gemini-3.6-flash
Grading method: judged
Verification: verified
Pass rate without the skill: 4.2%
Pass rate with the skill: 50%
Cases attempted: 24
Cases counted toward lift: 22
Cases that regressed: 0
Skill version measured: v1
Run completed: 7/27/2026, 09:16 UTC

The per-case answers from this run were removed by the retention sweep, so the case table below shows the verdicts without the text either arm produced. The counts above were recorded at the time and are unaffected. Answers are now kept for 180 days.

SkillScore blends 4 signals1 of 4 complete

BenchmarkPass rate WITH skill on a verified run50

Live evalNeeds ≥10 evaluated traces in 30 days

AI ratingNeeds ≥10 rated traces

AdoptionNeeds ≥10 serves across ≥2 orgs in 30 days

Efficiency · separate axis (at equal correctness)+0% turns-16% tokens

Shown for transparency; not credited unless a verified run shows no correctness regression.

Backed by 1 of 4 signals — each added signal makes the score more robust.

Verified on gemini-3.6-flash · re-tested 56 days ago

Other measured skills in the registry, with their headline benchmark lift.