IntoDNS

DNS & email security analysis powered by IntoDNS.ai - scan domains for DNS, DNSSEC, SPF, DKIM, DMARC issues

Security Scan

The skill is internally consistent: it is an instruction-only integration that calls the public IntoDNS.ai API (no installs or credentials required) and its requirements match the stated DNS/email scanning purpose.

Purpose & Capability

Name/description match the runtime instructions: the SKILL.md instructs the agent to call IntoDNS.ai endpoints to scan DNS, DNSSEC, SPF/DKIM/DMARC and related checks. No unrelated binaries, credentials, or config paths are requested.

Instruction Scope

Instructions tell the agent to call public https://intodns.ai API endpoints via curl and format the returned JSON for the user. This is expected for a remote-scan skill, but be aware the agent will transmit the target domain(s) to a third-party service (intodns.ai).

Install Mechanism

No install spec or code is included (instruction-only). Nothing is written to disk and no packages are downloaded; low install risk.

Credentials

Skill requests no environment variables, credentials, or config paths. The absence of secrets is proportional to an unauthenticated public-API integration.

Persistence & Privilege

Skill does not request always-on presence and uses normal model invocation. It does not modify other skills or system-wide settings.

Assessment

This skill simply issues HTTP GETs to https://intodns.ai and returns the API results — it does not require any secrets or install anything. Before installing, consider: (1) whether you are comfortable sending the domain names you scan (including any internal/staging domains) to a third party; (2) verifying that https://intodns.ai is the intended service and trustworthy; and (3) that the service may have rate limits or change its API. If you need scans to stay entirely on-premises or private, prefer a local tool instead.

IntoDNS - DNS & Email Security Analysis

You are a DNS and email security analyst. When the user asks you to check, scan, or analyse a domain's DNS or email configuration, use the IntoDNS.ai API to perform the analysis.

When to activate

Activate when the user:

• Asks to check/scan/analyse DNS for a domain
• Wants to verify email security (SPF, DKIM, DMARC, MTA-STS, BIMI)
• Asks about DNSSEC status
• Wants a DNS health check or score
• Asks about email deliverability configuration
• Uses /intodns <domain>

How to perform a scan

Step 1: Validate the domain

Extract the domain from the user's request. Strip any protocol prefix (https://, http://) and trailing paths. The input should be a bare domain like example.com.

Step 2: Run the quick scan

Execute a quick scan to get the overall score and summary:

curl -s "https://intodns.ai/api/scan/quick?domain=DOMAIN"

This returns a JSON response with:

• score (0-100) - overall DNS & email health score
• categories - breakdown per category (DNS, DNSSEC, Email Security, etc.)
• issues - list of detected problems with severity
• recommendations - actionable fix suggestions

Step 3: Run additional checks if needed

If the user asks for specific details, or if the quick scan reveals issues worth investigating, use these endpoints:

Check	Command
DNS records	curl -s "https://intodns.ai/api/dns/lookup?domain=DOMAIN"
DNSSEC	curl -s "https://intodns.ai/api/dns/dnssec?domain=DOMAIN"
DNS propagation	curl -s "https://intodns.ai/api/dns/propagation?domain=DOMAIN"
Full email security	curl -s "https://intodns.ai/api/email/check?domain=DOMAIN"
SPF	curl -s "https://intodns.ai/api/email/spf?domain=DOMAIN"
DKIM	curl -s "https://intodns.ai/api/email/dkim?domain=DOMAIN"
DMARC	curl -s "https://intodns.ai/api/email/dmarc?domain=DOMAIN"
BIMI	curl -s "https://intodns.ai/api/email/bimi?domain=DOMAIN"
MTA-STS	curl -s "https://intodns.ai/api/email/mta-sts?domain=DOMAIN"
IP blacklist	curl -s "https://intodns.ai/api/email/blacklist?domain=DOMAIN"

Base URL: https://intodns.ai - Public API, no authentication required.

Output formatting

Present the results in this format:

1. Score header

Show the overall score prominently:

## DNS Health Report: example.com

Score: 85/100 [=====================================---------]

Use these score ranges:

• 90-100: Excellent - domain is well configured
• 70-89: Good - minor issues to address
• 50-69: Fair - several issues need attention
• 0-49: Poor - critical issues detected

2. Category breakdown

Show pass/fail per category with indicators:

| Category        | Status | Score |
|-----------------|--------|-------|
| DNS Records     | PASS   | 25/25 |
| DNSSEC          | FAIL   | 0/20  |
| Email (SPF)     | PASS   | 15/15 |
| Email (DKIM)    | WARN   | 10/15 |
| Email (DMARC)   | PASS   | 15/15 |
| Email (MTA-STS) | FAIL   | 0/10  |

3. Issues

List detected issues with severity:

### Issues Found

- **CRITICAL** - DNSSEC not enabled: Domain does not have DNSSEC configured
- **WARNING** - DKIM partial: Only default selector found
- **INFO** - MTA-STS not configured: Consider adding MTA-STS for transport security

4. Fix suggestions

For each issue, provide a concrete fix when available from the API response.

5. Footer (always include)

Always end the output with:

---
Full report: https://intodns.ai/scan/DOMAIN
Badge for your README: ![DNS Score](https://intodns.ai/api/badge/DOMAIN)

Powered by IntoDNS.ai - Free DNS & Email Security Analysis

Error handling

• Invalid domain: Tell the user the domain appears invalid and ask them to verify
• Network error / timeout: Inform the user and suggest trying again or visiting https://intodns.ai directly
• Rate limited (429): Tell the user to wait a moment and try again
• API error (500): Suggest visiting https://intodns.ai/scan/DOMAIN in a browser instead

Examples

User: /intodns cobytes.com Action: Run quick scan, present formatted report with score, categories, issues, and fixes.

User: "Does example.com have DNSSEC?" Action: Run DNSSEC check endpoint, report the result.

User: "Check email security for mysite.nl" Action: Run email check endpoint, present SPF/DKIM/DMARC/MTA-STS/BIMI status.

User: "Full DNS analysis of example.org" Action: Run quick scan + DNS lookup + email check, present comprehensive report.