phishing-simulation-skill

name	phishing-simulation-skill
description	Phishing simulation campaign execution and analysis for security awareness assessment
allowed-tools	["Bash","Read","Write","Glob","Grep","WebFetch"]
graph	{"domains":["domain:security"],"specializations":["specialization:security-compliance"],"skillAreas":["skill-area:security-testing","skill-area:identity-security"],"roles":["role:security-engineer","role:compliance-officer"],"workflows":["workflow:security-audit"]}

Phishing Simulation Skill

Purpose

Execute and analyze phishing simulation campaigns to assess organizational security awareness, identify high-risk users, and measure the effectiveness of security training programs.

Capabilities

Campaign Template Generation

• Create realistic phishing email templates
• Design landing pages for credential harvesting simulations
• Generate attachment-based simulation scenarios
• Create spear-phishing templates using OSINT
• Develop pretexting scenarios
• Build multi-stage attack simulations

Campaign Execution

• Schedule and launch simulation campaigns
• Manage target user groups
• Configure sending parameters (timing, throttling)
• Handle bounce and delivery tracking
• Implement safe landing pages
• Manage campaign duration and scope

User Response Tracking

• Track email open rates