How do I install the Cis Gworkspace 3.1.3.4.3.5 skill?

Run npx skillmds@latest add cyberstrikeus/cis-gworkspace-3-1-3-4-3-5 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Gworkspace 3.1.3.4.3.5 skill do?

Ensure groups are protected from inbound emails spoofing your domain It is listed under Coding & Dev Tools on SkillMD.

Is Cis Gworkspace 3.1.3.4.3.5 safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Gworkspace 3.1.3.4.3.5?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Gworkspace 3.1.3.4.3.5 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Gworkspace 3.1.3.4.3.5?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Gworkspace 3.1.3.4.3.5 by cyberstrikeus

Name: Cis Gworkspace 3.1.3.4.3.5
Author: cyberstrikeus

File contents

3.1.3.4.3.5 Ensure groups are protected from inbound emails spoofing your domain

Overview

Property	Value
CIS ID	3.1.3.4.3.5
Level	L1
Profile Applicability	Enterprise Level 1
Assessment Type	Manual
Section	Gmail > Safety > Spoofing and authentication

Description

If a group receives an email that is spoofing your domain it is sent to the spam folder.

Rationale

You should protect your groups from any emails that spoofing your domain.

Impact

Emails that are spoofing your domain and are received by a group are sent to the spam folder.

Default Value

Not specified in benchmark.

Audit

To verify this setting via the Google Workspace Admin Console:

Log in to https://admin.google.com as an administrator
Select Apps
Select Google Workspace
Select Gmail
Under Safety - Spoofing and authentication, ensure Protect your Groups from inbound emails spoofing your domain is checked
Ensure Action is set to Move email to spam

Remediation

To configure this setting via the Google Workspace Admin Console:

Log in to https://admin.google.com as an administrator
Select Apps
Select Google Workspace
Select Gmail
Under Safety - Spoofing and authentication, set Protect your Groups from inbound emails spoofing your domain to checked
Set Action to Move email to spam
Select Save

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	9.5 Implement DMARC		x	x
v7	7.8 Implement DMARC and Enable Receiver-Side Verification		x	x

---name: cis-gworkspace-3-1-3-4-3-5description: Ensure groups are protected from inbound emails spoofing your domain---# 3.1.3.4.3.5 Ensure groups are protected from inbound emails spoofing your domain## Overview| Property | Value || ------------------------- | -------------------------------------------- || **CIS ID** | 3.1.3.4.3.5 || **Level** | L1 || **Profile Applicability** | Enterprise Level 1 || **Assessment Type** | Manual || **Section** | Gmail > Safety > Spoofing and authentication |## DescriptionIf a group receives an email that is spoofing your domain it is sent to the spam folder.## RationaleYou should protect your groups from any emails that spoofing your domain.## ImpactEmails that are spoofing your domain and are received by a group are sent to the spam folder.## Default ValueNot specified in benchmark.## AuditTo verify this setting via the Google Workspace Admin Console:1. Log in to [https://admin.google.com](https://admin.google.com) as an administrator2. Select **Apps**3. Select **Google Workspace**4. Select **Gmail**5. Under `Safety` - `Spoofing and authentication`, ensure `Protect your Groups from inbound emails spoofing your domain` is **checked**6. Ensure `Action` is set to `Move email to spam`## RemediationTo configure this setting via the Google Workspace Admin Console:1. Log in to [https://admin.google.com](https://admin.google.com) as an administrator2. Select **Apps**3. Select **Google Workspace**4. Select **Gmail**5. Under `Safety` - `Spoofing and authentication`, set `Protect your Groups from inbound emails spoofing your domain` to **checked**6. Set `Action` to `Move email to spam`7. Select **Save**## CIS Controls| Controls Version | Control | IG 1 | IG 2 | IG 3 || ---------------- | --------------------------------------------------------- | ---- | ---- | ---- || v8 | 9.5 Implement DMARC | | x | x || v7 | 7.8 Implement DMARC and Enable Receiver-Side Verification | | x | x |

Frequently asked questions

Cis Gworkspace 3.1.3.4.3.5