技能 cold-email-deliverability
📦
cold-email-deliverability
内容修订 r1 中风险 ⚙️ 外部命令🌐 网络访问📁 文件系统访问
Check Email Deliverability Before Launch
Authentication gaps and domain reputation problems can disrupt outreach before a campaign starts. This skill guides 15 readiness checks and organizes failures into prioritized fixes.
支持: Claude Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "cold-email-deliverability" from https://skillstore.io/skills/cmj-hub-cold-email-deliverability.md and its manifest at https://skillstore.io/api/skills/cmj-hub-cold-email-deliverability/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“cold-email-deliverability”。 Fourteen checks passed, but SPF does not include our sending provider. Summarize readiness and the next action.
预期结果:
- Checklist score: 93.3/100, grade B.
- Launch status: hold. The SPF failure remains a blocker despite the numerical grade.
- First action: correct provider authorization in SPF, check the DNS lookup limit, and verify authentication before sending.
正在使用“cold-email-deliverability”。 Ten checks passed. Mailbox age, sending volume, reply ratio, reverse DNS, and blacklist checks failed. Prioritize the fixes.
预期结果:
- Checklist score: 66.7/100, grade D. Hold the campaign.
- Resolve the blacklist issue first and verify reverse DNS with the sending provider.
- Reduce sending volume, continue mailbox preparation, and review reply performance before reassessing.
安全审计
中风险v1 • 2026/10/3 打开版本化报告
All 28 static findings are false positives involving Markdown, legitimate diagnostic lookups, public reference links, or a documentation path. No evidence found of credential theft, destructive actions, or prompt injection. One semantic issue remains: score-based launch advice can conflict with mandatory authentication and blacklist blockers.
1
已扫描文件
138
分析行数
0
复核项
0
已忽略误报
已确认安全问题 (1)
中
Readiness Grades Can Override Authentication Blockers
The workflow calls authentication failures and blacklist hits blockers, but the grade table says "Ship but fix the B-list within 30 days". Passing 14 of 15 checks scores 93.3, allowing launch advice despite one unresolved blocker and risking unauthenticated sending or reputation damage.
The unweighted score and permissive B-grade advice directly conflict with the earlier blocker rule. The risk is contradictory guidance, not demonstrated automated sending.
风险因素
⚙️ 外部命令 (23)
🌐 网络访问 (2)
📁 文件系统访问 (1)
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/cmj-hub-cold-email-deliverability/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/cmj-hub-cold-email-deliverability?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/cmj-hub-cold-email-deliverability?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cmj-hub-cold-email-deliverability/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/cmj-hub-cold-email-deliverability.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
cmj-hub. (2026). cold-email-deliverability security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cmj-hub-cold-email-deliverability/audits/1BibTeX 引用
@techreport{cmj-hub-cmj-hub-cold-email-deliverability-2026,
author = {cmj-hub},
title = {cold-email-deliverability security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/cmj-hub-cold-email-deliverability/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cold-email-deliverability security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "cmj-hub"
date-released: "2026-10-03"
url: "https://skillstore.io/skills/cmj-hub-cold-email-deliverability/audits/1"
identifiers:
- type: other
value: "skillstore:cmj-hub-cold-email-deliverability:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
65
社区
83
规范符合性
你能构建什么
Review a First Outreach Campaign
Check domain authentication, mailbox age, and sending volume before starting outreach.
Prepare a Domain Remediation Plan
Review DNS and reputation findings and prioritize the fixes that affect campaign readiness.
Standardize Client Readiness Reviews
Apply the same 15-point checklist across client sending domains and record unresolved blockers.
试试这些提示
Start a Readiness Review
Check deliverability for [sending_domain]. Ask for missing sending details and explain which checks require manual verification.
Review Authentication
Review SPF, DKIM, and DMARC for [sending_domain] using provider [inbox_provider] and selector [selector]. Report observed evidence and prioritize authentication failures.
Evaluate Mailbox Readiness
Review [sending_domain] for [from_address]. Provider: [provider]; mailbox age: [days]; daily volume: [volume]; reply ratio: [percent]. Include reputation and warm-up checks.
Audit Launch Blockers
Run the 15-point review for [sending_domain] using [sending_details]. Show evidence, unavailable checks, score, and fix order. Keep launch blocked until blocker checks pass.
最佳实践
- Provide the sending domain, provider, DKIM selector, sending IP, mailbox age, volume, and recent reply ratio when available.
- Record observed evidence and keep unavailable checks unverified instead of treating them as passes.
- Resolve authentication failures and blacklist hits before sending, regardless of the numerical score.
避免
- Treating a high checklist score as proof of inbox placement or permission to ignore blockers.
- Providing API keys or mailbox credentials when public lookups and nonsecret sending details are sufficient.
- Applying DNS changes or increasing sending volume without verifying findings and current provider requirements.
常见问题
What does this skill review?
It guides 15 checks covering SPF, DKIM, DMARC, blacklists, reverse DNS, mailbox readiness, MX TLS, and message signing.
Does it require paid tools or API keys?
No. The workflow prohibits paid API calls and API-key requests, and provides manual fallbacks when tools are unavailable.
Does it send emails or update DNS?
The documented workflow performs diagnostic reviews and recommends fixes. It does not implement campaign sending or DNS changes.
What does the score mean?
It is the percentage of 15 checks that pass. Authentication failures and blacklist hits should block launch regardless of the grade.
Can it guarantee delivery to the inbox?
No. Checklist results do not guarantee inbox placement, and provider policies should be verified against current requirements.
Can I use it without the parent cold-email skill?
The source marks it as a helper loaded by cold-email, not a directly invocable skill. Standalone tool availability and referenced documentation require verification.