Skip to main content

pretext-brainstormer

Research recent public events and brainstorm phishing pretext ideas for a named target organization. Use when the user provides a client name and a phishing goal such as payload delivery or credential capture and wants timely subject ideas.

Jump to install

Source facts

Repository
SpecterOps/skills
Last source activity
August 14, 2026 at 01:16
Detected SKILL.md language
English
Stars
657
Forks
72

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer
4 files

Showing SKILL.md

SKILL.md
Source instructions · Read-only preview
name
pretext-brainstormer
description
Research recent public events and brainstorm phishing pretext ideas for a named target organization. Use when the user provides a client name and a phishing goal such as payload delivery or credential capture and wants timely subject ideas.
metadata
{"author":"GhostWorks"}
# Pretext Brainstormer Research current public context for a target organization and generate timely pretext ideas tied to the user's phishing goal. Read `../../references/persuasion-principles.md` before scoring and ranking ideas. ## Required Inputs - target organization name - phishing goal Supported goals: - `payload delivery` - `credential capture` If the user gives a close variant such as `payload`, `installer`, `document`, `creds`, or `credential`, normalize it to one of the supported goals. ## Workflow 1. Research recent target context. - Search for recent news, press releases, events, product updates, policy changes, hiring pages, benefits pages, blog posts, leadership updates, and public-facing operational notices. - Prefer official sources first, then high-quality secondary coverage. 2. Extract usable anchors. - Pull out dated events, recurring initiatives, deadlines, office changes, benefits, technology rollouts, webinars, conferences, publications, and public controversies. - Record the exact terms the target uses for teams, programs, and locations. 3. Map anchors to the phishing goal. - For `payload delivery`, favor meetings, software updates, documents, invoices, statements, policies, templates, installers, and attachments. - For `credential capture`, favor SSO prompts, secure document portals, benefits access, HR systems, webmail, VPN, training, and meeting joins. 4. Score anchors against social-engineering principles. - Prefer ideas that naturally support one or more of: - Authority - Reciprocity - Greed - Commitment and consistency - Social proof - Liking - Scarcity - Curiosity - Fear and anxiety - Trust - Shame or embarrassment - Choose the principle that best fits the public anchor and requested goal. 5. Generate candidate pretexts. - Produce a list of concise subject ideas tied to recent anchors. - Keep each pretext plausible and easy to expand into an email or landing page. - Avoid ideas that rely on unsupported internal details. - Favor ideas where the social-engineering principle is obvious and supports the call to action. 6. Rank the ideas. - Put the strongest, most current, most target-specific ideas first. - Prefer pretexts with a clean explanation for the requested action. - Prefer ideas that combine timely public context with a strong persuasion principle. ## Output Return: 1. Short research summary 2. A list of 8-15 pretext ideas 3. For each idea: - subject / theme - source anchor - social-engineering principle - why it fits the goal - suggested sender persona - suggested call to action 4. Top 3 recommendations ## Quality Rules - Use current public information. - Prefer exact dates where useful. - Prefer official language from the target's own public materials. - Keep ideas goal-aligned. - Tag each idea with its primary persuasion principle. - State when an idea is weaker or more generic. ## Example Triggers - `Use Social Engineering to brainstorm pretexts for Acme Corp with the goal of payload delivery.` - `Research recent events for Contoso and generate credential capture pretext ideas.`
View on GitHub