Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.
Automate repetitive workflows and reduce manual effort
Example: Generate reports, summarize documents, draft communications
Save 3-5 hours per week on routine tasks
Learn new skills, understand complex topics, get expert guidance
Example: Explain concepts, provide examples, suggest learning resources
Accelerate learning and skill development by 2x
Enhance output quality through reviews, suggestions, and refinements
Example: Review drafts, suggest improvements, catch errors
Improve work quality by 30-40% with less effort
Time estimate: 15-45 minutes depending on use case complexity
Prerequisites
Submit your Claude Code skill and start earning
epx add zhaoxuya520/reverse-skill/skills/email-securityCompatible with
Supported agents
| name | email-security |
| description | Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research. |
NOW: 确认授权（分析样本邮件 / 租户配置评审）NOW: 不向真实用户二次投递恶意样本ACT: 头认证 → 内容/URL → 附件沙箱 → 租户控制面建议□ 完整原始头：Received 链、From/Return-Path 一致性
□ SPF/DKIM/DMARC 对齐结果
□ URL 沙箱与附件静态（联合 malware-analysis）
□ 仿冒品牌与回复地址差异
□ 租户：反钓鱼策略、外部标记、MFA、OAuth app 同意
| 工具 | 用途 |
|---|---|
| 邮件客户端「查看源」 | 头 |
| dig/nslookup | SPF/DMARC 记录 |
| urlscan / 沙箱 | 链接与附件 |
| 租户管理中心 | 策略 |
references/email-auth-checklist.md../malware-analysis/ ../attack-chain/（钓鱼阶段） ../windows-ad/（令牌）上游: MASTER R36
MUST NOT: 未授权对第三方域群发测试钓鱼
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versionemail-securityExecute the skills CLI command in your project's root directory to begin installation:
epx add zhaoxuya520/reverse-skill/skills/email-securityFetches email-security from zhaoxuya520/reverse-skill and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/email-security
Restart Cursor to activate email-security. Access via /email-securityin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use when skill capabilities match your task, clear ROI on time saved, and you can validate outputs. Best for repetitive tasks, learning, and quality improvement.
✗ Avoid when
Avoid when task requires deep expertise you can't validate, involves sensitive decisions, or when learning process is more valuable than speed of completion.
apk-reverse
zhaoxuya520/reverse-skill · security · same repo
cloud-k8s
zhaoxuya520/reverse-skill · security · same repo
llm-security
zhaoxuya520/reverse-skill · security · same repo
pwn-chain
zhaoxuya520/reverse-skill · security · same repo
malware-analysis
zhaoxuya520/reverse-skill · security · same repo
macos-reverse
zhaoxuya520/reverse-skill · security · same repo
email-security reduced setup friction for our internal harness; good balance of opinion and flexibility.
I recommend email-security for anyone iterating fast on agent tooling; clear intent and a small, reviewable surface area.
Keeps context tight: email-security is the kind of skill you can hand to a new teammate without a long onboarding doc.
email-security has been reliable in day-to-day use. Documentation quality is above average for community skills.
email-security is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
We added email-security from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
Useful defaults in email-security — fewer surprises than typical one-off scripts, and it plays nicely with `npx skills` flows.
email-security is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
Solid pick for teams standardizing on skills: email-security is focused, and the summary matches what you get after install.
Keeps context tight: email-security is the kind of skill you can hand to a new teammate without a long onboarding doc.
showing 1-10 of 53