What problem does it solve? Security testers need a disciplined, evidence-gated way to verify whether their own domains' DNS configuration, email authentication (SPF, DKIM, DMARC), and password-reset or callback flows are correctly bound, without risking real mail delivery or spoofing. ## Core Features & Use Cases - DNS and Mail Authentication Review: Checks MX, SPF, DKIM, and DMARC records on owned domains with read-only DNS queries cross-validated against application logs. - Reset/Callback Binding Validation: Verifies sender, recipient, return-path alignment, token binding, and expiration in self-owned test mailboxes and no-op reset flows. - Evidence-Gated Oracles: Distinguishes real findings (reproducible misbinding between owned identities) from false positives like single DNS lint results or undelivered messages. - Use Case: During an authorized assessment of your own domain, use this Skill to confirm that a password-reset email cannot be misrouted to a different owned identity and that DMARC policy matches actual receiving behavior. ## Quick Start Use hunt-email-dns to plan an evidence-gated validation of my own domain's DNS records, email authentication, and password-reset binding.
