email-deliverability-security

Configure SPF, DKIM, DMARC, and related DNS records for email authentication.

15|Updated May 12, 2026
One-click install
npx skills add https://github.com/GoldenWing-360/claude-security-skills --skill email-deliverability-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: email-deliverability-security
Source: https://github.com/GoldenWing-360/claude-security-skills/tree/main/email-deliverability-security
Command: npx skills add https://github.com/GoldenWing-360/claude-security-skills --skill email-deliverability-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the challenge of configuring email authentication protocols to ensure legitimate emails are delivered and spoofed messages are blocked, thereby improving domain credibility and security.

Core Features & Use Cases

  • Email Authentication Setup: Guides the user through configuring SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI records to secure outbound email channels.
  • Monitoring & Reporting: Assists in interpreting DMARC aggregate reports and verifying the correct DNS setup for robust email security.
  • Use Case: When launching a new domain to send transactional emails or when domains are being spoofed, this Skill provides the required DNS records and validation steps to safeguard email communications.

Quick Start

Request the AI to review your DNS records and provide configuration instructions for your email domain security setup.

Frequently Asked Questions about email-deliverability-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure SPF, DKIM, and DMARC records for my domain?

To configure SPF, DKIM, and DMARC records, you must update your domain's DNS settings with specific TXT entries. This Skill guides you through generating the required DNS records and validating the setup to authenticate outgoing mail and prevent spoofing.

What is the best way to stop email spoofing on my domain?

The best way to stop email spoofing is to implement DMARC, SPF, and DKIM authentication protocols. This Skill provides the necessary DNS configuration steps to block spoofed messages and ensure legitimate emails are delivered correctly.

Why do I need MTA-STS and TLS-RPT for email security?

You need MTA-STS and TLS-RPT to enforce secure SMTP transport and report TLS connection failures. This Skill helps configure these protocols alongside SPF, DKIM, and DMARC to harden outbound email channels and safeguard communications.

How do I interpret DMARC aggregate reports for my domain?

To interpret DMARC aggregate reports, you analyze the XML data to verify email authentication results and identify unauthorized senders. This Skill assists in reading these reports and verifying your DNS setup for robust email security compliance.

Can I use this to set up email authentication for a new domain launch?

Yes, you can use this to set up email authentication during a new domain launch. The Skill provides required DNS records and validation steps for securing transactional emails and preventing spoofing from the start.

Does setting up BIMI records require existing SPF and DMARC configurations?

Setting up BIMI records requires existing SPF and DMARC configurations to display brand logos in inboxes. This Skill guides you through implementing BIMI alongside the prerequisite protocols to ensure full email authentication compliance.