Have Grok Bot investigate a suspicious email

An email passed SPF, DKIM and DMARC, but Grok Bot found the hidden phishing link and explained why the checks passed.

In short

What it does: An email passed SPF, DKIM and DMARC, but Grok Bot found the hidden phishing link and explained why the checks passed.

Agent: Grok Bot · Category: Security

Steps in brief:

  1. Ask your bot to investigate the email.
  2. Have it look for hidden links and explain why authentication checks (SPF, DKIM, DMARC) passed anyway.
  3. Have it suggest a fix or prepare a report.

Who made it: Alex (X post, 15 Oct 2026) · source

Last updated · based on 336 use cases on agentsetups, each credited to its author.

by Alex15 Oct 2026

Prompt for your agent

Goal: Check a suspicious email before clicking anything in it.
Setup: agents used in source: Grok Bot; tools/MCPs stated: email.
Steps:
1. Ask your bot to investigate the email.
2. Have it look for hidden links and explain why authentication checks (SPF, DKIM, DMARC) passed anyway.
3. Have it suggest a fix or prepare a report.
Rules: ask me before anything irreversible (sending, posting, paying, deleting); don’t invent data, results or tools I haven’t given you; tell me what you couldn’t verify.
Note: A single shared example; it says nothing about how reliably it catches scams.
Based on: Alex — https://x.com/alexmichaelio/status/2110574355256394089

Steps are from the source. Includes a “Based on” credit line.

I tried this

Tell the next builder. One anonymous answer each; click again to undo.

Agents, models and tools only what the source states

Agents
Grok Bot
Tools
  • email

Sources & credit