---
name: deliverability-check
description: Check a sending domain's SPF, DKIM and DMARC records with public DNS lookups, scan outreach drafts and links for spam triggers, and return a plain-language pass or fix list. Use before any cold email campaign or when replies suddenly drop.
metadata:
  author: Ekos Labs
  version: "0.1.0"
---

# Deliverability Check

Make sure emails can land in the inbox before a single one is sent.

Execution mode: agent-native. Uses public DNS lookups (`dig` or `nslookup`) and reads the drafts. No API key needed.

Example request: "Check outreach.acme.com before we start the campaign. Here are the drafts."

## Inputs

- The sending domain (the part after @ in the from address) and the email provider (Google Workspace, Microsoft 365, other).
- The DKIM selector if known (Google: `google`; Microsoft: `selector1` and `selector2`).
- The drafts.

## Method

1. **SPF:** `dig +short TXT <domain>`. Exactly one record starting `v=spf1`, includes the provider, ends in `~all` or `-all`, and stays under 10 DNS lookups.
2. **DKIM:** `dig +short TXT <selector>._domainkey.<domain>`. A key exists for the provider's selector.
3. **DMARC:** `dig +short TXT _dmarc.<domain>`. A record exists, at least `p=none` with a `rua` address; recommend moving to `quarantine` once reports are clean.
4. **MX and return path:** MX records exist so replies work.
5. **Domain setup:** using a separate outreach domain or subdomain rather than the main domain; domain older than a few weeks; a simple website at the domain.
6. **Drafts:** check each against the [spam trigger list](references/triggers.md): link count, tracking links, attachments, all-caps, spammy phrases, image-only content, missing plain-text version.
7. **Volume:** recommend a daily send cap per mailbox for new domains (start under 30 a day, raise slowly).

## Output

```markdown
# Deliverability check: <domain> (<date>)
| Check | Result | Fix |
| --- | --- | --- |
| SPF | pass / fix | ... |
...
## Draft issues (per draft, the line and the fix)
## Sending plan (mailboxes, daily cap, ramp)
```

Do not change DNS. Do not suggest ways to hide sending identity or bypass filters. The goal is to send mail people want, correctly configured.