An advanced forensic tool designed to parse raw email headers to detect spoofing, validate authentication protocols, and trace mail routing paths.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install email-header-analyser
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install email-header-analyser using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Email Header Analyser API?
The Email Header Analyser API is a specialized tool within the ecosystem of Openclaw Skills designed for deep inspection of email message headers. It empowers security professionals and incident responders to deconstruct the complex metadata hidden within emails to uncover the true origin of a message and verify its legitimacy. By automating the parsing of raw header strings, it provides immediate clarity on whether an email has bypassed or failed critical security checks.
In an era of sophisticated phishing and business email compromise (BEC) attacks, this skill acts as a vital defensive layer. It translates raw, often cryptic SMTP data into actionable intelligence, allowing teams to validate SPF, DKIM, and DMARC statuses while mapping out the hop-by-hop journey of a message through intermediate mail servers.
Email Header Analyser API Use Cases
- Investigating phishing attempts by identifying the true originating sender IP and domain.
- Validating email authentication protocols like SPF, DKIM, and DMARC for compliance audits.
- Tracing the routing path of delayed or suspicious emails through various mail transfer agents (MTAs).
- Forensic analysis of suspicious indicators and anomalies within email headers during incident response.
- Automating email security operations for SOC analysts within Openclaw Skills workflows.
How Email Header Analyser API Works
- The user provides a raw email header string as input to the Openclaw Skills interface.
- The API parses the multi-line header data, identifying key fields such as Received headers and Authentication-Results.
- Forensic logic is applied to extract the sender's originating IP, hostname, and the chronological list of mail servers involved in delivery.
- Authentication results are evaluated to provide a pass/fail status for SPF, DKIM, and DMARC protocols.
- A structured JSON object is returned, highlighting security metadata and any suspicious indicators detected during analysis.
Email Header Analyser API Setup
To integrate this capability into your workflow using Openclaw Skills, you can interact with the endpoint via standard HTTP requests.
# Example of analyzing a header via curl
curl -X POST "https://api.mkkpro.com/security/email-header-analyser/analyze-header" \
-H "Content-Type: application/json" \
-d '{"header": "Received: from mail.example.com..."}'
Email Header Analyser API Data Schema & Taxonomy
The skill returns a structured JSON response to ensure interoperability with other Openclaw Skills. Below is the primary data taxonomy:
| Field | Type | Description |
|---|---|---|
| sender_ip | string | The identified IPv4 or IPv6 of the source server. |
| authentication | object | Status of SPF, DKIM, and DMARC (pass/fail). |
| received_servers | array | A collection of hops including hostname, IP, and timestamp. |
| suspicious_indicators | array | Flags for anomalies like spoofing or mismatched paths. |
| date | string | ISO 8601 formatted date of the message. |
Email Header Analyser API Advanced Features
- Multi-hop route tracing to visualize the entire path of an email from origin to destination.
- Automated anomaly detection for identifying common spoofing techniques and header injections.
- High-throughput processing suitable for enterprise-grade security operations and SOC automation.
- Integration support for major platforms including MCP Server and RapidAPI within the Openclaw Skills framework.
SKILL.md
Loading
Related Openclaw Skills
Feishu Docs (Docx) API Skill
A powerful integration for automating the full lifecycle of Feishu Docx documents, including advanced Markdown and HTML content conversion.
Eastmoney News Search
A specialized financial news retrieval tool providing real-time A-share market insights and economic updates from Eastmoney.
Agent Team Orchestration
A production-grade framework for managing multi-agent teams through structured roles, task lifecycles, and rigorous handoff protocols.
Agent Create Config
A comprehensive automation skill for creating, configuring, and deploying Openclaw employees and AI agents from scratch.
Trading Quant
A professional-grade quantitative trading tool providing real-time market data and multi-dimensional scoring across global equity and commodity markets.
Polymarket Mispricing Events
A specialized trading automation skill that identifies and acts on price discrepancies between Polymarket and its primary competitors.
Featured*
