DNS Lookup Skill

DNS questions ("did the record propagate," "where's mail for this domain going," "who owns this") come with two keyless answers: Google's DNS-over-HTTPS for records, and RDAP — WHOIS's structured successor — for registration. This skill queries both, and does the part dig doesn't: decoding what the records mean — an SPF string into its policy, MX priorities into the actual mail provider, an expiry date into "renews in 6 weeks."

What This Skill Produces

• The records — A/AAAA/MX/TXT/CNAME/NS/whatever was asked, with TTLs
• The decode — mail provider identified from MX, SPF/DMARC policies read out, CNAME chains followed
• Registration facts — registrar, creation/expiry dates, status codes (from RDAP; contact data is mostly redacted now, and the answer says so)
• The commands — exact curls, rerunnable

Required Inputs

Ask for these if not provided:

• The domain — and the record type if the question implies one ("where's mail going" → MX; "is the site moved" → A/CNAME; "verify ownership token" → TXT)
• The scenario — propagation check, email debugging, domain due-diligence, expiry watch — the decode leads with it

Framework: The Two Protocols

1. Records (DoH): curl -s "https://dns.google/resolve?name=github.com&type=MX" — types by name (A, AAAA, MX, TXT, CNAME, NS, SOA, CAA). Cloudflare as fallback/second opinion: curl -s -H "accept: application/dns-json" "https://cloudflare-dns.com/dns-query?name=github.com&type=A". Two resolvers agreeing is also the honest propagation check.
2. Registration (RDAP): curl -s "https://rdap.org/domain/github.com" — rdap.org bootstraps to the right registry. Read: events (registration/expiration dates), status (clientTransferProhibited etc. — decode the meaningful ones), registrar entity. Expect redacted contacts — post-privacy-era WHOIS data is minimal, and pretending otherwise misleads.
3. The decodes that add value: MX hosts → the provider ("aspmx.l.google.com → Google Workspace"); TXT → which services may send mail and the strictness; TXT → the policy (none/quarantine/reject) in words; CNAME chains followed to their end.