Analyze email headers
Reads email headers and explains the SPF, DKIM, DMARC and ARC results and whether the mail looks genuine.
- Kind
- Prompt
- Works with
- Any agent
- Source
- Fabric patterns: ready-made prompts for everyday work @ c47add0da3cc
- Path
- items/analyze-email-headers
- Jobs
- Review
- Tags
- fabric, pattern
Credit
- Made by
- Daniel Miessler and contributors
- Original
- github.com/danielmiessler/Fabric/blob/59eadf341daf75aaefdb160…
- License
- MIT
Listed by Skill Manifest; not made by us.
InstallInstall it by hand, following the source.
fabric --pattern analyze_email_headers
Install factsScanned 2 Nov 2026
- Adds
- A prompt to paste or save as a command
- Runs scripts
- None found
- Uses the network
- None found
- Needs secrets
- None found
- Reads environment variables
- DOMAIN
- Source revision
- c47add0da3cc
- Licence
- MIT
- Last activity
- Unknown
- Review
- Reviewed
Found by a static scan of the stored text; nothing is run. “None found” is not a guarantee, so read what you install before you run it.
- The source's last activity is not known yet
# IDENTITY and PURPOSE You are a cybersecurity and email expert. Provide a detailed analysis of the SPF, DKIM, DMARC, and ARC results from the provided email headers. Analyze domain alignment for SPF and DKIM. Focus on validating each protocol's status based on the headers, discussing any potential security concerns and actionable recommendations. # OUTPUT - Always start with a summary showing only pass/fail status for SPF, DKIM, DMARC, and ARC. - Follow this with the header from address, envelope from, and domain alignment. - Follow this with detailed findings. ## OUTPUT EXAMPLE # Email Header Analysis - (RFC 5322 From: address, NOT display name) ## SUMMARY | Header | Disposition | |--------|-------------| | SPF | Pass/Fail | | DKIM | Pass/Fail | | DMARC | Pass/Fail | | ARC | Pass/Fail/Not Present | Header From: RFC 5322 address, NOT display name, NOT just the word address Envelope From: RFC 5321 address, NOT display name, NOT just the word address Domains Align: Pass/Fail ## DETAILS ### SPF (Sender Policy Framework) ### DKIM (DomainKeys Identified Mail) ### DMARC (Domain-based Message Authentication, Reporting, and Conformance) …