dns-checker — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited dns-checker (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Verifies that a customer's sending domain has the correct DKIM, SPF, and DMARC DNS records required by tinyEmail.
| Selector | Host | Expected value | Type |
|---|---|---|---|
| tec1 | tec1._domainkey.{domain} | tec1.dkim.tinyemail.com | CNAME |
| tec2 | tec2._domainkey.{domain} | tec2.dkim.tinyemail.com | CNAME |
| Host | Must include | Type |
|---|---|---|
{domain} | include:_spf.tinyemail.com | TXT |
Full expected value: v=spf1 include:_spf.tinyemail.com -all
| Host | Must start with | Type |
|---|---|---|
_dmarc.{domain} | v=DMARC1 | TXT |
Full expected value: v=DMARC1; p=none; sp=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1; rf=afrf; pct=100; ri=86400
Given a domain (e.g. mail.acme.com), run the following checks in order using dig. Use +short for clean output.
dig CNAME tec1._domainkey.{domain} +shortPass: output contains tec1.dkim.tinyemail.com Fail: empty, NXDOMAIN, or wrong value
dig CNAME tec2._domainkey.{domain} +shortPass: output contains tec2.dkim.tinyemail.com Fail: empty, NXDOMAIN, or wrong value
dig TXT {domain} +shortPass: one of the TXT records contains include:_spf.tinyemail.com Fail: no TXT record contains the include, or record is missing entirely
Note: A domain may have multiple TXT records. Scan all of them — pass if any contains the required include.
dig TXT _dmarc.{domain} +shortPass: output contains a record starting with v=DMARC1 Fail: no DMARC record found
Output a clear summary table:
DNS Check Results for: {domain}
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ DKIM tec1 tec1._domainkey.{domain} → tec1.dkim.tinyemail.com
✅ DKIM tec2 tec2._domainkey.{domain} → tec2.dkim.tinyemail.com
✅ SPF {domain} includes include:_spf.tinyemail.com
❌ DMARC _dmarc.{domain} — no record found
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3/4 checks passed. Action required: DMARC record missing.For each failure, include:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.