Implementing email security with dmarc dkim spf
Skill autohandai/community-skills/implementing-email-security-with-dmarc-dkim-spf
A collection of curated, useful, and safe skills for Autohand Code CLI Agent
npx -y skills add autohandai/community-skills --skill implementing-email-security-with-dmarc-dkim-spfAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 9 stars9 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Audit and validate email authentication configurations by checking SPF, DKIM, and DMARC DNS records for a domain. Uses dnspython to query TXT records, validates SPF syntax and lookup counts, verifies DKIM selector records, parses DMARC policies, and identifies misconfigurations that enable email spoofing. Generates remediation recommendations.
The file declares its own license as Apache-2.0. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
1.5 KB, 234 tokens by cl100k_base, as published. Nobody here has run it
Instructions
- Install dependencies:
pip install dnspython checkdmarc - Provide target domain(s) to audit.
- Run the agent to check email security:
- Query and validate SPF records (syntax, mechanism count, includes, redirect)
- Check DKIM records for common selectors (google, default, selector1, selector2)
- Parse DMARC records (policy, subdomain policy, reporting URIs, alignment)
- Identify misconfigurations enabling spoofing
- Generate remediation recommendations
python scripts/agent.py --domain example.com --output email_security_report.json
Examples
Email Security Audit Result
Domain: example.com
SPF: v=spf1 include:_spf.google.com ~all (WARN: softfail allows spoofing)
DKIM: selector1 OK, selector2 OK
DMARC: v=DMARC1; p=none; rua=mailto:[email protected] (WARN: policy=none, no enforcement)
Risk: HIGH - p=none with ~all allows email spoofing
What ships with it: 3 files
22.1 KB alongside SKILL.md, 1 of them executable
references/
- api-reference.md2.2 KB
scripts/
- agent.pyruns8.9 KB
- LICENSE11.0 KB