Security-review a suspicious email that passed every check
A Tesla engineer got an email that passed SPF, DKIM and DMARC and showed a verified check, but felt off, so he had his AI review it without clicking anything; the bot found a hidden phishing link, explained why the standard checks had passed, and wrote a report to xAI with a proposed fix. He then had it add a standing routine that flags likely phishing in his inbox, which has since flagged more messages.
How it works
- Engineer forwards the email to his bot with a no-click rule
- Bot checks sender, authentication results and every link including hidden ones
- Finds a hidden phishing link and explains why the checks passed
- Bot writes a report to xAI with a proposed fix
- Engineer adds a daily routine flagging likely phishing
Why it’s worth knowing
The agent caught what SPF, DKIM, DMARC and a blue check all missed: a hidden link.
Where it’s from
Summarized from a public post on whatagentscando.com. See the original ↗