# Implementing Email Security With Dmarc Dkim Spf

> Audit and validate email authentication configurations by checking SPF, DKIM, and DMARC DNS records for a domain. Uses dnspython to query TXT records, validates SPF syntax and lookup counts, verifies DKIM selector records, parses DMARC policies, and identifies misconfigurations that enable email spoofing. Generates remediation recommendations.

- Skill: `autohandai-community-skills/implementing-email-security-with-dmarc-dkim-spf` (Agent Skill, multi-file: 4 files)
- Install (CLI): `npx skillmds@latest add autohandai-community-skills/implementing-email-security-with-dmarc-dkim-spf`
- Raw SKILL.md: https://api.skillmd.com/api/skills/autohandai-community-skills/implementing-email-security-with-dmarc-dkim-spf/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: Apache-2.0
- Author: autohandai (https://skillmd.com/u/autohandai-community-skills)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/autohandai-community-skills/implementing-email-security-with-dmarc-dkim-spf

---


## Instructions

1. Install dependencies: `pip install dnspython checkdmarc`
2. Provide target domain(s) to audit.
3. Run the agent to check email security:
   - Query and validate SPF records (syntax, mechanism count, includes, redirect)
   - Check DKIM records for common selectors (google, default, selector1, selector2)
   - Parse DMARC records (policy, subdomain policy, reporting URIs, alignment)
   - Identify misconfigurations enabling spoofing
   - Generate remediation recommendations

```bash
python scripts/agent.py --domain example.com --output email_security_report.json
```

## Examples

### Email Security Audit Result
```
Domain: example.com
SPF: v=spf1 include:_spf.google.com ~all (WARN: softfail allows spoofing)
DKIM: selector1 OK, selector2 OK
DMARC: v=DMARC1; p=none; rua=mailto:dmarc@example.com (WARN: policy=none, no enforcement)
Risk: HIGH - p=none with ~all allows email spoofing
```