Domain Mask

What it does

When your agent uses it

• Mask URL for demo
• Tasks that involve Cloud networking

Example prompts

• “domain mask”
• “mask domain”
• “mock domain”
• “/domain-mask”

Requirements

• Node.js
• Compatibility (from SKILL.md): macOS only. Requires mkcert and sudo (for port 443 and /etc/hosts modification).

Workflow steps

4 steps, taken from the step headings in SKILL.md.

1. 1Gather inputs
2. 2Check prerequisites
3. 3Start the proxy
4. 4Confirm cleanup

What it can do on your machine

Read from SKILL.md and the folder at commit 985c436. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Ships 1 file in scripts/ (JavaScript), which the agent can run.

  Shell commands in SKILL.md call:

  • brew
  • node

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  Hosts in commands or code, which the agent is likely to contact:

  • main--mysite--org.aem.page
  • gabrielwalt.github.io

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

• Compatibility

  macOS only. Requires mkcert and sudo (for port 443 and /etc/hosts modification).

  From compatibility in the SKILL.md frontmatter.

Context cost

Domain Mask loads about 739 tokens when it runs. Until then it costs about 109 tokens; SKILL.md has 260 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~109

When it runs · the whole SKILL.md, loaded when a task matches

~739

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

• NoteRuns commands with sudoSKILL.md:4

  ibility: macOS only. Requires mkcert and sudo (for port 443 and /etc/hosts modification).

• NoteRuns commands with sudoSKILL.md:26

  - sudo access (for port 443 and /etc/hosts)

• NoteRuns commands with sudoSKILL.md:63

  sudo node "$DOMAIN_MASK" <display-domain> <target-url>

• NoteRuns commands with sudoSKILL.md:86

  sudo sed -i '' '/<display-domain>/d' /etc/hosts

• NoteRuns commands with sudoSKILL.md:92

  - Requires sudo (privileged port 443 + hosts file)

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from adobe/skills at commit 985c436, republished under its Apache-2.0 licence (© adobe). 260 words, ~739 tokens.

name

domain-mask

description

Mask a URL behind a custom domain for demos and recordings. Adds a trusted HTTPS reverse proxy so the browser shows a clean display domain with a green padlock while serving content from the real target URL. Handles /etc/hosts, mkcert certificates, and cleanup automatically. Triggers on: "domain mask", "mask domain", "mock domain", "proxy URL", "demo URL", "fake domain", "demo proxy", "mask URL for demo", "domain-mask".

compatibility

macOS only. Requires mkcert and sudo (for port 443 and /etc/hosts modification).

license

Apache-2.0

if [[ -n "${CLAUDE_SKILL_DIR:-}" ]]; then
  DOMAIN_MASK="${CLAUDE_SKILL_DIR}/scripts/domain-mask.mjs"
else
  DOMAIN_MASK="$(find ~/.claude -path "*/domain-mask/scripts/domain-mask.mjs" \
    -type f 2>/dev/null | head -1)"
fi
if [[ -z "$DOMAIN_MASK" || ! -f "$DOMAIN_MASK" ]]; then
  echo "Error: domain-mask.mjs not found." >&2
fi

which mkcert || echo "Install mkcert: brew install mkcert && mkcert -install"

sudo node "$DOMAIN_MASK" <display-domain> <target-url>

sudo sed -i '' '/<display-domain>/d' /etc/hosts

© adobe, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 4 other files (scripts) in plugins/web/skills/domain-mask of adobe/skills.

• SKILL.md
• .releaserc.json
• evals/evals.json
• package.json
• scripts/domain-mask.mjs

Open the folder on GitHubat commit 985c436