Email Authentication (SPF/DKIM/DMARC) & FIDO2 Audit (offensive-phishing)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

Email security and phishing-resilience auditing covering SPF hardfail (-all), DKIM 2048-bit key rotation, DMARC p=reject enforcement, MTA-STS, lookalike domain monitoring, and hardware-bound FIDO2/WebAuthn passkey adoption preventing AITM proxy theft.

Operational Workflow