Assess email infrastructure security by scanning SPF, DKIM, DMARC, and STARTTLS.
npx skills add https://github.com/0x0pointer/skills --skill email-security
Please help me install this Agent Skill. Skill: email-security Source: https://github.com/0x0pointer/skills/tree/main/email-security Command: npx skills add https://github.com/0x0pointer/skills --skill email-security
Many organizations lack visibility into their email authentication and delivery settings, leaving them exposed to spoofing, open relay abuse, and undetected misconfigurations.
Invoke the skill with /email-security example.com to run a quick audit.
High-intent search queries and answers about installing and using this skill.
You can audit SPF, DKIM, and DMARC records by running a domain security scan that evaluates DNS configurations for correctness and spoofing resilience. This skill orchestrates these DNS queries and SMTP tests automatically without requiring external infrastructure.
Testing for open relay and SMTP user enumeration involves probing mail servers for spoofing susceptibility and valid email addresses. This skill uses built-in tools like swaks to detect open relays and perform user enumeration during its security assessment.
Yes, you can check STARTTLS support and MTA-STS policy without external infrastructure by using built-in tools that orchestrate SMTP tests directly. The skill evaluates TLS configuration and TLS-RPT reporting internally for any target domain.
An email security audit evaluates spoofing resilience by analyzing SPF, DKIM, and DMARC records, then actively testing mail server susceptibility to spoofing attacks. It orchestrates DNS queries and SMTP tests to identify misconfigurations exposing the domain.
No, you do not need external dependencies to perform an email security assessment. The skill uses built-in tools to orchestrate DNS queries, SMTP tests, and reporting actions, evaluating authentication protocols and open relay risks independently.
You should run an email infrastructure security scan before a red-team engagement to uncover misconfigurations in SPF, DKIM, and DMARC records, and detect open relay vulnerabilities. This visibility highlights spoofing and user enumeration attack vectors.
DavidKkResolve hostnames to A and AAAA DNS records via a GET API.
wraps-teamDefine SPF, DKIM, and DMARC configurations and IP warming schedules for AWS SES.
salmanabdurrahmanAudits SMTP endpoints for STARTTLS, open-relay, and user enumeration risks.
L3DigitalNetQuery DNS records and diagnose resolution issues with dig, nslookup, and host.
