vulkro-sf org mail
Checks the live org's org-wide email addresses and Email Services addresses.
vulkro-sf org mail --target-org <alias>
vulkro-sf org mail -o <alias> --format json
| Finding | Severity | Meaning |
|---|---|---|
SF-MAIL-001 | Medium | Any profile can send as an org-wide address, so any user can impersonate that sender. |
SF-MAIL-002 | Medium | An Email Services address uses a non-Salesforce domain, so mail to it flows into an Apex handler. |
It reads email settings only. No mail is read or sent. A custom domain in SF-MAIL-002 is often legitimate: review it.
See also: org audit-trail, org report.