skills/sales-safetymails/SKILL.md
SafetyMails platform help — bulk email verification (up to 2M emails, 19-step algorithm), real-time API validation (JavaScript embed for forms), Email Finder (B2B corporate lookup), list cleaning, spamtrap/disposable/catch-all detection, integrations. Use when your email list has too many bounces, SafetyMails verification results look wrong, the JavaScript embed isn't catching bad emails on your forms, Email Finder isn't returning corporate addresses, or integrations aren't syncing verified results. Do NOT use for general deliverability strategy across tools (use /sales-deliverability), general enrichment strategy (use /sales-enrich), building prospect lists (use /sales-prospect-list), or connecting tools generically (use /sales-integration).
npx skillsauth add sales-skills/sales sales-safetymailsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Help the user with SafetyMails platform questions — from bulk email verification and list cleaning through real-time API validation, Email Finder, integrations, and credit management.
SafetyMails is a Brazil-founded email verification platform with 8,000+ customers and 2B+ emails verified. ISO 27001 certified. Core strengths: bulk list cleaning (up to 2M emails), real-time JavaScript embed for form validation, and B2B corporate email finder.
If references/learnings.md exists, read it first for accumulated knowledge.
Ask the user:
What area of SafetyMails do you need help with?
What type of verification or lookup do you need?
What's your goal? (describe your specific objective — e.g., "clean 50K contacts before a Mailchimp campaign", "add real-time validation to a WordPress form", "find emails for 200 prospects")
If the user's request already provides most of this context, skip directly to the relevant step. Lead with your best-effort answer using reasonable assumptions (stated explicitly), then ask only the most critical 1-2 clarifying questions at the end — don't gate your response behind gathering complete context.
If the request maps to a specialized skill, route:
/sales-deliverability/sales-enrich/sales-prospect-list/sales-integrationOtherwise, answer directly from platform knowledge using the reference below.
Read references/platform-guide.md for the full reference — Bulk Email Verification (the 19-step algorithm, scale, credit cost), the Real-Time API (no-code <script> embed + custom HMAC-SHA256 REST call), Email Finder, free tools, reporting, the verification-status data model, the API quick reference, the integration list, and best-effort pricing. The verbatim API docs are in references/safetymails-api-reference.md.
Answer using only the relevant section for the user's question — don't dump the full reference.
Based on the user's specific question, provide step-by-step instructions:
Best-effort from research — review these, especially items about pricing tiers and API limitations that may have changed.
Don't assume API access comes with every plan. The real-time JavaScript API requires a monthly subscription plan. Pay-as-you-go credits do not include API access. If you only need bulk verification, pay-as-you-go works. If you need form validation or real-time checks, you must subscribe.
Don't underestimate Email Finder credit cost. At 7 credits per found email, a batch of 500 lookups can cost up to 3,500 credits. Budget accordingly. The upside: you pay 0 credits when an email is not found, and only 1 credit for risky domains.
There IS a REST API — use HMAC, not a raw key. SafetyMails has a custom HTTP REST API for real-time validation (POST https://<TICKET_ORIGEM>.safetymails.com/api/<CODE_TICKET>) and a separate batch validation API (Swagger at panel.safetymails.com/swagger_api2.html). Auth is HMAC-SHA256: sign the email with your API Key and send the signature in the Sf-Hmac header — passing the raw API key as a token will fail. Official code examples (JS/PHP/Python/Java/Go) live at github.com/SafetyMails-Team/safetymails-sdk. The batch API needs support-issued credentials. Rate limits aren't published — confirm with support before high-volume use.
Don't send to Catch-All addresses without monitoring. Catch-All/Accept-All domains accept all emails at the SMTP level — SafetyMails cannot confirm individual mailbox existence. Including these in campaigns is a judgment call: they may be fine, or they may bounce. Monitor bounce rates closely if you include them.
Don't ignore spamtrap results. If SafetyMails flags addresses in your list as spamtraps, take it seriously. Even a single spamtrap hit can get your sending domain blocklisted. A high spamtrap rate in your list likely means the list was purchased, scraped, or hasn't been cleaned in a very long time — consider the source.
Self-improving: If you discover something not covered here, append it to references/learnings.md with today's date.
/sales-deliverability — Email deliverability strategy across tools (SPF/DKIM/DMARC, warmup, inbox placement, bounce management)/sales-enrich — Enrichment strategy across tools (waterfall enrichment, CRM hygiene, credit optimization)/sales-integration — Connect SafetyMails to CRM and other tools via Zapier, Make, or direct integrations/sales-prospect-list — Build targeted prospect lists with ICP definition and segmentation/sales-do — Not sure which skill to use? The router matches any sales objective to the right skill. Install: npx skills add sales-skills/sales --skill sales-doUser says: "I have 25,000 contacts in Mailchimp and want to verify them before sending a product launch email" Skill does:
User says: "I want to stop fake emails from entering our HubSpot database through our demo request form" Skill does:
User says: "I have a spreadsheet with 150 names and company domains — I need to find their email addresses" Skill does:
/sales-enrich if the user also needs phone numbers, titles, or company data beyond what SafetyMails provides
Result: Verified corporate email addresses for the prospect list, ready for outreachSymptom: A large portion of your list comes back as Catch-All/Accept-All, making it hard to judge list quality Cause: Many corporate domains configure catch-all mail servers that accept all addresses — SafetyMails (and any verification tool) cannot confirm individual mailbox existence on these domains Solution: Segment catch-all results separately. For high-value prospects on catch-all domains, include them in campaigns but monitor bounce rates per-send. For bulk campaigns, consider excluding catch-all addresses to protect sender reputation. If most of your list is catch-all, the list may skew toward large enterprises — this is normal.
{"Success": false, "ErrorCode": "401"}Symptom: Script embed or REST API calls return authentication errors
Cause: Most often the HMAC signature is wrong (signing the wrong value, wrong key, or wrong header), or the key is invalid/expired, or your account is on a pay-as-you-go plan (which does not include API access)
Solution: For the custom REST API, send the signature in the Sf-Hmac header computed as HMAC_SHA256(value=email, key=API Key) — do NOT send the raw API key as the auth value. Confirm the <TICKET_ORIGEM> subdomain and <CODE_TICKET> path match the source created in the Real-time API panel, and that the body field is named exactly email. Verify your key at panel.safetymails.com → Real-time API. Confirm you are on a monthly subscription plan — pay-as-you-go does not include API access. For the script embed, check the ticket in the script URL has no extra spaces or line breaks. Cross-check against the language examples at github.com/SafetyMails-Team/safetymails-sdk.
Symptom: Credit balance dropping faster than anticipated, especially when using Email Finder Cause: Email Finder costs 7 credits per found email (vs. 1 credit per bulk verification). Duplicate emails in uploaded lists also consume credits. Solution: Deduplicate lists before uploading to avoid paying twice for the same email. Track Email Finder usage separately — 100 successful lookups cost 700 credits. Use the free single email verifier on the SafetyMails website for one-off checks instead of spending bulk credits. Review usage reports in your dashboard to identify where credits are going.
tools
Wizlogo (wizlogo.com) platform help — a budget online logo maker (template/style-variation, marketed as "AI") plus a hub of FREE branding tools (business-name, blog-name and slogan generators, business-card maker, invoice generator, color converter, domain search). The pricing traps: the FREE logo is PERSONAL-USE-ONLY; the two cheap paid tiers are RASTER PNG/JPG only — Single (~€39.99 one-time) and Unlimited (~€3.99 per WEEK, recurring) — and VECTOR (SVG/PDF/EPS) is gated to the ~€299.99 Enterprise tier, which also bundles human designer edits and a social kit. Transparent PNG is on all paid plans. Use when making a Wizlogo logo, understanding free-vs-paid or personal-vs-commercial use, which tier unlocks vector/SVG for print, the weekly-subscription billing trap, its free name/slogan generators, or whether it has an API (UI-only — no public API, webhooks, Zapier or MCP). Do NOT use to just generate the business name (use /sales-namelix) or to compare/validate branding tools (use /sales-idea-validation).
tools
VistaPrint platform help (vistaprint.com, a Cimpress company) — the small-business design + print + digital-marketing platform: a free AI Logomaker (4 generations, 60 more after free sign-up) exporting SVG/PNG/PDF at 4000x4000 with no watermark, a free Brand Kit, business cards/flyers/signage/apparel/promo print, and a website builder. THE RIGHTS TRAP: VistaPrint states NO intellectual-property rights transfer on an AI-generated logo — you get usage rights but CANNOT register it for trademark or copyright; only its human designer service transfers full IP. Use when making a VistaPrint logo, asking if you own or can trademark it, running out of AI logo credits, printed colors not matching the screen, bleed/DPI/font file-prep rejections, or asking whether VistaPrint has an API (the consumer site does not — automation runs through the parent Cimpress Open partner-fulfilment API). Do NOT use for Vista Social scheduling (use /sales-vistasocial) or comparing logo tools market-wide (use /sales-idea-validation).
tools
Turbologo (turbologo.com) platform help — a budget AI/DIY logo maker: enter a business name + industry, pick icons and colors, and it proposes logo concepts you refine in an in-browser editor, then pay a one-time fee to download (designing is free, previews are watermarked, downloading is the paywall). Vector SVG/PDF is gated to the mid tier and up; the top tier adds a brand kit (business cards, letterheads, email signatures, social assets). Use when generating a logo in Turbologo, choosing which download tier to buy, vector SVG vs raster PNG, removing the free watermark, the time-limited edit-after-purchase window, pay-to-download pricing questions, whether an AI logo is yours to trademark, or whether Turbologo has an API to bulk-generate logos (it is UI-only — no public API, webhooks, Zapier, or MCP). Do NOT use to generate the business name (use /sales-namelix), compare or validate branding tools across the market (use /sales-idea-validation), or build wider marketing creative (use /sales-canva).
tools
Online Logo Maker (onlinelogomaker.com) platform help — a long-standing free/freemium DIY logo maker: build the mark yourself from icons, shapes, text, and fonts — MANUAL/template-based, NOT enter-a-name-get-AI-concepts. The free pack downloads a LOW-RES 300px PNG with a background; vector SVG, transparent PNG, and 2000px high-res are gated to a one-time lifetime Premium pack (not a subscription). The free tier's commercial-use rights are disputed by reviewers — clean ownership effectively needs Premium, and a shared-icon mark can be non-distinctive. Use for building/editing a logo here, free download vs Premium, vector SVG or transparent PNG, one-time pricing, commercial-use/trademark terms, near-namesake confusion (NOT LogoMaker.com / LogoMakr / Logomakerr.ai), or whether it has an API (UI-only — no API, webhooks, Zapier, MCP). Do NOT use to generate the business name (use /sales-namelix), compare branding tools across the market (use /sales-idea-validation), or build wider creative (use /sales-canva).