How do I install the Cis Gworkspace 3.1.3.4.3.1 skill?

Run npx skillmds@latest add cyberstrikeus/cis-gworkspace-3-1-3-4-3-1 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Gworkspace 3.1.3.4.3.1 skill do?

Ensure protection against domain spoofing based on similar domain names is enabled It is listed under Coding & Dev Tools on SkillMD.

Is Cis Gworkspace 3.1.3.4.3.1 safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Gworkspace 3.1.3.4.3.1?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Gworkspace 3.1.3.4.3.1 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Gworkspace 3.1.3.4.3.1?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Gworkspace 3.1.3.4.3.1 by cyberstrikeus

Name: Cis Gworkspace 3.1.3.4.3.1
Author: cyberstrikeus

File contents

3.1.3.4.3.1 Ensure protection against domain spoofing based on similar domain names is enabled

Overview

Property	Value
CIS ID	3.1.3.4.3.1
Level	L1
Profile Applicability	Enterprise Level 1
Assessment Type	Manual
Section	Gmail > Safety > Spoofing and authentication

Description

Moves domain spoofing emails to spam folder.

Rationale

You should protect your users from domain spoofing emails.

Impact

Domain spoofed emails will be moved to a user's spam folder.

Default Value

Protect against domain spoofing based on similar domain names is checked
Action is Keep email in inbox and show warning (default)

Audit

To verify this setting via the Google Workspace Admin Console:

Log in to https://admin.google.com as an administrator
Select Apps
Select Google Workspace
Select Gmail
Under Safety - Spoofing and authentication, ensure Protect against domain spoofing based on similar domain names is checked
Ensure Action is Move email to spam

Remediation

To configure this setting via the Google Workspace Admin Console:

Log in to https://admin.google.com as an administrator
Select Apps
Select Google Workspace
Select Gmail
Under Safety - Spoofing and authentication, set Protect against domain spoofing based on similar domain names to checked
Set Action to Move email to spam
Select Save

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	9.3 Maintain and Enforce Network-Based URL Filters		x	x
v7	7.4 Maintain and Enforce Network-Based URL Filters		x	x

---name: cis-gworkspace-3-1-3-4-3-1description: Ensure protection against domain spoofing based on similar domain names is enabled---# 3.1.3.4.3.1 Ensure protection against domain spoofing based on similar domain names is enabled## Overview| Property | Value || ------------------------- | -------------------------------------------- || **CIS ID** | 3.1.3.4.3.1 || **Level** | L1 || **Profile Applicability** | Enterprise Level 1 || **Assessment Type** | Manual || **Section** | Gmail > Safety > Spoofing and authentication |## DescriptionMoves domain spoofing emails to spam folder.## RationaleYou should protect your users from domain spoofing emails.## ImpactDomain spoofed emails will be moved to a user's spam folder.## Default Value- `Protect against domain spoofing based on similar domain names` is **checked**- `Action` is `Keep email in inbox and show warning (default)`## AuditTo verify this setting via the Google Workspace Admin Console:1. Log in to [https://admin.google.com](https://admin.google.com) as an administrator2. Select **Apps**3. Select **Google Workspace**4. Select **Gmail**5. Under `Safety` - `Spoofing and authentication`, ensure `Protect against domain spoofing based on similar domain names` is **checked**6. Ensure `Action` is `Move email to spam`## RemediationTo configure this setting via the Google Workspace Admin Console:1. Log in to [https://admin.google.com](https://admin.google.com) as an administrator2. Select **Apps**3. Select **Google Workspace**4. Select **Gmail**5. Under `Safety` - `Spoofing and authentication`, set `Protect against domain spoofing based on similar domain names` to **checked**6. Set `Action` to `Move email to spam`7. Select **Save**## CIS Controls| Controls Version | Control | IG 1 | IG 2 | IG 3 || ---------------- | -------------------------------------------------- | ---- | ---- | ---- || v8 | 9.3 Maintain and Enforce Network-Based URL Filters | | x | x || v7 | 7.4 Maintain and Enforce Network-Based URL Filters | | x | x |

Frequently asked questions

Cis Gworkspace 3.1.3.4.3.1