Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-gworkspace-3-1-3-5-3The command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Showing SKILL.md
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Based on SOC occupation classification
| name | cis-gworkspace-3.1.3.5.3 |
| description | Ensure per-user outbound gateways is disabled |
| category | cis-gworkspace |
| version | 1.3.0 |
| author | cyberstrike-official |
| tags | ["cis","gcp","google-workspace","gmail","forwarding"] |
| cis_id | 3.1.3.5.3 |
| cis_benchmark | CIS Google Workspace Foundations Benchmark v1.3.0 |
| tech_stack | ["gcp","google-workspace"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
A per-user outbound gateway is a mail server, other than the Google Workspace mail servers, that delivers outgoing mail for a user in your domain.
Mail sent via external SMTP will circumvent your outbound gateway.
Care should be taken before implementation to ensure there is no business need for mail sent via external SMTP gateway.
AppsGoogle WorkspaceGmailEnd User Access - Allow per-user outbound gateways, ensure Allow users to send mail through an external SMTP server when configuring a "from" address hosted outside your email domain is uncheckedAllow users to send mail through an external SMTP server when configuring a "from" address hosted outside your email domain should be unchecked.
AppsGoogle WorkspaceGmailEnd User Access - Allow per-user outbound gateways, set Allow users to send mail through an external SMTP server when configuring a "from" address hosted outside your email domain to uncheckedSaveAllow users to send mail through an external SMTP server when configuring a "from" address hosted outside your email domain is unchecked
This control does not have explicit CIS Controls mappings in the PDF.
Level 1