email-best-practices

Guide SPF/DKIM/DMARC setup and CAN-SPAM, GDPR, and CASL compliance workflows.

148|39|Updated Dec 13, 2025
One-click install
npx skills add https://github.com/usenotra/notra --skill email-best-practices
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: email-best-practices
Source: https://github.com/usenotra/notra/tree/main/.agents/skills/email-best-practices
Command: npx skills add https://github.com/usenotra/notra --skill email-best-practices

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides guidance to build deliverable, compliant emails and reduce spam, bounce rates, and legal risk by aligning architecture with authentication, consent, and lifecycle best practices.

Core Features & Use Cases

  • Guidance on SPF/DKIM/DMARC setup and DNS authentication to improve deliverability.
  • Compliance-focused workflows for CAN-SPAM, GDPR, and CASL including unsubscribe and consent management.
  • Email capture and consent flows, opt-in verification, and robust handling of webhooks and bounce events.

Quick Start

Review your app's signup and onboarding email flows and implement recommended authentication, consent, and unsubscribe patterns.

Frequently Asked Questions about email-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up SPF, DKIM, and DMARC for email deliverability?

Email deliverability requires SPF, DKIM, and DMARC DNS authentication to verify your domain and reduce bounce rates. This Skill provides structured guidance and checklists to configure these protocols during app implementation.

What is the best way to manage GDPR and CAN-SPAM compliance for marketing emails?

CAN-SPAM and GDPR compliance for marketing emails requires proper opt-in consent capture, unsubscribe management, and lifecycle workflows. This Skill consolidates these regulations into actionable compliance patterns.

How do I handle email bounce events and webhooks in my application?

Handling email bounce events and webhooks requires robust retry logic and event processing to manage failed deliveries. This Skill provides example workflows for capturing and responding to these events.

Do I need different consent flows for transactional vs marketing emails?

Yes, transactional and marketing emails require distinct consent flows because marketing emails mandate explicit opt-in verification under CASL and GDPR. This Skill guides the choice and implementation of appropriate email types.

Why do my app's onboarding emails go to spam despite passing DNS checks?

Onboarding emails may go to spam if consent capture and unsubscribe patterns are non-compliant, even with DNS checks passing. This Skill aligns your email architecture with authentication and lifecycle best practices to improve deliverability.