r4Access and manage credentials, secrets, and domain registrations securely using the R4 platform with injected environment variables and API calls.
Install via ClawdBot CLI:
clawdbot install lukezirngibl/r4Grade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://r4.dev/api/v1/machine/domain-manager/purchaseCalls external URL not in known-safe list
https://r4.dev/api/v1/machine/domain-manager/search?name=<base-nameAI Analysis
The skill's external API calls (r4.dev) are consistent with its stated purpose as a password manager and domain registrar interface. While the signals indicate undocumented external endpoints, these appear to be functional calls for domain search and purchase, not credential harvesting or hidden malicious behavior.
Audited Apr 17, 2026 · audit v1.0
Generated Mar 20, 2026
A development team uses R4 to securely manage database credentials, API keys, and SSH keys for automated deployment scripts. The agent runs deployment commands using 'r4 run --' to inject secrets as environment variables, eliminating hardcoded credentials in source code and ensuring secure access to production servers.
An e-commerce business uses R4 to store Stripe API keys, payment gateway credentials, and webhook secrets. The agent retrieves these secrets programmatically to process transactions, manage subscriptions, and handle webhook events securely without exposing sensitive data in logs or configuration files.
A digital marketing agency uses R4 to search for available domains, purchase them for client projects, and manage DNS records. The agent automates domain registration and DNS configuration through API calls, streamlining the setup of client websites and marketing campaigns.
A cloud operations team uses R4 to manage AWS credentials, database connection strings, and encryption keys. The agent runs infrastructure-as-code scripts with 'r4 run --' to provision resources securely, ensuring credentials are never logged or stored in plaintext during automation workflows.
A QA team uses R4 to store different sets of credentials for development, staging, and production environments. The agent retrieves environment-specific secrets to run automated tests, ensuring secure access to databases and APIs across all testing stages without manual credential input.
R4 operates as a subscription-based password manager and domain registrar for businesses. Revenue comes from monthly or annual fees per user or project, with tiered pricing based on features like vault storage capacity, number of domains managed, and API access levels.
R4 is licensed to large organizations with custom deployment options (on-premises or private cloud). Revenue is generated through upfront licensing fees, annual maintenance contracts, and premium support services tailored for enterprise security and compliance requirements.
R4 monetizes through API usage fees for domain operations and transaction-based revenue. Charges apply per domain search, purchase, or DNS management action, with additional fees for high-volume API calls or premium TLD registrations.
💬 Integration Tip
Always use 'r4 run --' to inject secrets as environment variables when executing commands, and leverage the '--json' flag for programmatic parsing of vault data in automation scripts.
Scored Apr 19, 2026
Save durable memory without secrets
Direct REST API reader for Infisical secrets. Lightweight, no middleware. Use when the agent needs to fetch API keys or credentials from Infisical.
Mask sensitive company-project document content before analysis
1Password Connect API skill. Use when working with 1Password Connect for activity, vaults, heartbeat. Covers 15 endpoints.
On-screen agent alert: topmost message card + pulsating screen borders via Nameplate. Use before password-manager auth prompts or whenever blocked on the human.
Complete guide for using pass, the standard Unix password manager. Use this skill whenever the user asks about pass, password-store, managing passwords from...