implementing-email-security-with-dmarc-dkim-spf 100/100

Is implementing-email-security-with-dmarc-dkim-spf safe to install?

SaferSkills independently audited implementing-email-security-with-dmarc-dkim-spf (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

implementing-email-security-with-dmarc-dkim-spf/SKILL.md · 1 file

implementing-email-security-with-dmarc-dkim-spf/SKILL.md1.5 KB · Markdown

name: implementing-email-security-with-dmarc-dkim-spf

description: >-

Audit and validate email authentication configurations by checking SPF, DKIM,

and DMARC DNS records for a domain. Uses dnspython to query TXT records,

validates SPF syntax and lookup counts, verifies DKIM selector records,

parses DMARC policies, and identifies misconfigurations that enable email

spoofing. Generates remediation recommendations.

domain: cybersecurity

subdomain: security-operations

tags: [implementing, email, security, with]

version: "1.0"

author: mahipal

license: Apache-2.0

Instructions

Install dependencies: pip install dnspython checkdmarc
Provide target domain(s) to audit.
Run the agent to check email security:

Query and validate SPF records (syntax, mechanism count, includes, redirect)
Check DKIM records for common selectors (google, default, selector1, selector2)
Parse DMARC records (policy, subdomain policy, reporting URIs, alignment)
Identify misconfigurations enabling spoofing
Generate remediation recommendations

python scripts/agent.py --domain example.com --output email_security_report.json

Examples

Email Security Audit Result

Domain: example.com
SPF: v=spf1 include:_spf.google.com ~all (WARN: softfail allows spoofing)
DKIM: selector1 OK, selector2 OK
DMARC: v=DMARC1; p=none; rua=mailto:[email protected] (WARN: policy=none, no enforcement)
Risk: HIGH - p=none with ~all allows email spoofing

implementing-email-security-with-dmarc-dkim-spf— agent skill

Is implementing-email-security-with-dmarc-dkim-spf safe to install?

Instructions

Examples

Email Security Audit Result

Audit the pieces. Scan the whole. Decide.