Claude Code skill

subpoof ships an official Claude Code skill so you can drive the API straight from an AI coding session. Ask in plain language ("enumerate the subdomains of example.com", "what changed for example.com since the last scan", "find newly-registered .com domains") and Claude runs the right calls against the API, handles pagination and errors, and summarizes the findings for you.

The skill is open source: github.com/jabreity/subpoof-skill.

Install

In Claude Code, add the repo as a plugin marketplace and install the plugin:

/plugin marketplace add jabreity/subpoof-skill
/plugin install subpoof@subpoof-skill

The repo is its own marketplace, so the first command points Claude Code straight at it and the second installs the skill. Run /plugin any time to manage what is installed.

Set your API key

The skill reads your key from the SUBPOOF_API_KEY environment variable and never logs or echoes it. Export it before you start a session:

export SUBPOOF_API_KEY="your_key_here"

Your key is on the dashboard Settings page. If the variable is not set, Claude asks you for the key rather than making unauthenticated calls. See the API reference for how the key is used and how quota works.

What it can do

Once installed, the skill covers the full API surface:

• Scan a domain end to end - submit a scan, poll the job to completion, and read the analyzed results, including the enrichment options and the dictionary-probe controls.
• List newly-registered domains - the daily new-registration feed, filtered by substring, TLD, and date range.
• Query the dictionary - the ranked subdomain-label dictionary built from your prior scans.
• Pull per-domain history - the timeline of what subdomains appeared or disappeared for a domain over time.

For exact parameters and schemas the skill defers to the live OpenAPI spec at https://api.subpoof.com/v1/openapi.json, so it stays correct as the API grows.

Example prompts

• "Enumerate the subdomains of example.com and summarize the notable findings."
• "What changed for example.com since the last scan?"
• "Find newly-registered .com domains from the latest daily feed."
• "Which subdomain labels have we seen on example.com?"
• "Show the scan-history timeline for example.com over the past month."

Notes

• The skill needs a subpoof account and an API key. See Pricing for the plan quotas; the free Observer plan is enough to try it.
• It calls the same public API documented in the API reference, so it is bound by the same monthly query quota and rate-limit behavior.