All ideasMore in Life admin

Security-review a suspicious email that passed every check

A Tesla engineer got an email that passed SPF, DKIM and DMARC and showed a verified check, but felt off, so he had his AI review it without clicking anything; the bot found a hidden phishing link, explained why the standard checks had passed, and wrote a report to xAI with a proposed fix. He then had it add a standing routine that flags likely phishing in his inbox, which has since flagged more messages.

How it works

  1. Engineer forwards the email to his bot with a no-click rule
  2. Bot checks sender, authentication results and every link including hidden ones
  3. Finds a hidden phishing link and explains why the checks passed
  4. Bot writes a report to xAI with a proposed fix
  5. Engineer adds a daily routine flagging likely phishing

Why it’s worth knowing

The agent caught what SPF, DKIM, DMARC and a blue check all missed: a hidden link.

Where it’s from

Summarized from a public post on whatagentscando.com. See the original ↗

Upgraded prompt

A ready-to-use prompt for this idea, built from research on what makes AI agents do the job right: who the AI should be, the exact steps, and a check to make sure it was done the way you wanted.

1Who the AI should be
2The prompt, with the steps
3The check when it’s done
Upgraded prompts are coming soon.

Try next

Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.