Email Deliverability

Audit and improve email deliverability for ecommerce marketing by diagnosing spam folder issues, list hygiene problems, authentication gaps, and sending repu...

Security Scan

The skill is an instruction-only audit template that asks for campaign/ DNS values you provide and produces a deliverability report; its requirements and behavior are consistent with its stated purpose.

Purpose & Capability

The name and description match the instructions: the skill performs a diagnostic audit of email deliverability and explicitly requires sending domain, ESP, and campaign metrics. It does not request unrelated credentials or system access.

Instruction Scope

SKILL.md confines the agent to producing an audit from user-supplied inputs and explicitly states it does not query DNS or ESPs directly; this reduces risk. The one caveat is that the audit depends on users pasting SPF/DKIM/DMARC strings and campaign metrics, which can be sensitive—users must not paste subscriber lists, API keys, or other PII.

Install Mechanism

No install spec or code files are present; the skill is instruction-only, so nothing is written to disk and there is no external artifact download risk.

Credentials

The skill requests no environment variables or credentials (proportional). It does ask for DNS records and campaign metrics as inputs; those are expected for this task but can contain sensitive configuration information. There are no unexplained credential requests.

Persistence & Privilege

always is false and there is no install or configuration persistence. The skill can be invoked autonomously (platform default), which is normal and acceptable here given the limited scope and lack of credential access.

Assessment

This skill appears coherent and low-risk because it only produces an audit from data you paste. Before using it: (1) do not paste subscriber lists, raw email addresses, API keys, or other PII—only paste summary metrics and DNS strings needed for the audit; (2) remember the skill does NOT validate DNS or ESP dashboards itself, so independently verify critical DNS/SPF/DKIM/DMARC records with your DNS host or tools like dig/MXToolbox or the ESP's dashboard; (3) if you want automated, live checks against Google Postmaster or SNDS you will need an integration that requests credentials—this skill does not do that; (4) consider redacting anything you consider sensitive and manually confirm any recommended changes before applying them in your DNS or ESP settings.

Email Deliverability runs a structured audit of why your ecommerce emails are landing in spam, Gmail Promotions, or Updates instead of the primary inbox — and gives you a prioritized fix list. Deliverability is rarely one thing; it is a stack of authentication records, list quality, sending patterns, content signals, and recipient engagement working against each other. This skill walks the stack, flags what is broken, and tells you which fixes return the most inbox placement per hour of work.

Use when

• A Shopify, BigCommerce, or Klaviyo user reports that open rates have collapsed, that customers say "I never got the email," or that test sends are landing in spam on Gmail, Outlook, or Yahoo
• A brand is preparing to migrate from one ESP to another (Mailchimp to Klaviyo, Klaviyo to Sendlane, etc.) and wants a pre-migration deliverability checklist plus an IP and domain warm-up plan
• The user has just turned on Google and Yahoo's 2024 bulk-sender requirements and is unsure whether their SPF, DKIM, DMARC, one-click unsubscribe, and spam-complaint thresholds meet the new bar
• The user mentions "promotions tab," "spam folder," "sender reputation," "DMARC," "list hygiene," "engagement segmentation," "warm-up," or "bounces" in the context of marketing email and wants a complete diagnostic — not a single tip

What this skill does

The skill performs a layered audit across seven deliverability domains: domain authentication (SPF, DKIM, DMARC alignment), sending infrastructure (shared vs dedicated IP, subdomain strategy), list hygiene (bounce rates, role accounts, recycled spam traps), engagement signals (open and click decay, sunset policies), content and template (image-to-text ratio, link shorteners, spammy phrases, dark mode rendering), volume and cadence (warm-up curve, batch size, time-of-day variance), and reputation monitors (Google Postmaster, Microsoft SNDS, blocklists). For each domain it returns a status, the evidence the user should check in their ESP or DNS, and a fix.

Inputs required

• Sending domain and ESP (required): so the audit references the right DNS records and ESP-specific dashboards (Klaviyo, Mailchimp, Sendgrid, etc.)
• Recent campaign metrics (required): open rate, click rate, bounce rate, unsubscribe rate, spam-complaint rate for the last three to five sends
• List growth source (required): is the list grown from on-site signups, lead magnets, purchase data, lookalike imports, or paid lead-gen — origin drives risk profile
• Symptoms observed (required): primary inbox, Promotions, Spam, or "completely missing" — and on which providers
• Current authentication records (optional): pasted SPF, DKIM, and DMARC values speed up the audit
• Recent changes (optional): ESP migration, new sending domain, list import, large send to cold segment — these usually explain sudden drops

Output format

The deliverable is a deliverability audit report with a one-line verdict at the top (Healthy / At Risk / In Trouble) followed by a domain-by-domain table with status, evidence, and fix per domain. After the table the skill returns a 30-day remediation plan broken into "do today," "do this week," and "do this month," with each item tagged for difficulty (easy / medium / advanced) and expected impact on inbox placement. A monitoring section lists the three to five dashboards or tools the user should check weekly going forward — Google Postmaster, Microsoft SNDS, MXToolbox blacklist check, Klaviyo deliverability tab, and a seed-list testing tool — and what threshold should trigger an alert.

Scope

• Designed for: ecommerce email marketers, founders managing their own ESP, lifecycle marketers, and CRM operators
• Platform context: Klaviyo, Mailchimp, Omnisend, Sendlane, Postscript, Brevo, Sendgrid, and other ESPs commonly used by DTC brands
• Language: English

Limitations

• The audit reads the inputs you provide — it does not query your DNS, your ESP, or Google Postmaster directly, so the quality of the output depends on the accuracy of the data you paste in
• Does not provide legal advice on CAN-SPAM, GDPR, CASL, or other consent regimes; flags consent-related risks only
• Cannot guarantee inbox placement — it improves the structural and behavioral factors that influence reputation, but mailbox provider algorithms are opaque and recipient engagement remains the dominant signal