phishing-triage
Installation
SKILL.md
Phishing Triage
Phishing works by manufacturing urgency so you act before you think. This does the thinking: it reads the specific signals in the message — the sender, the link, the pressure, the ask — gives a clear verdict, and tells you how to verify safely (by going to the source yourself, never via the message). And if you already clicked or entered details, it switches straight to damage control.
What This Skill Produces
- A verdict — likely phishing / likely legit / unsure, with confidence
- The specific flags — the red flags present (mismatched sender, look-alike link, urgency, unusual ask, generic greeting) and any reassuring green flags
- The safe verify step — how to confirm by contacting the company through official channels you look up yourself
- What to do next — delete and report if phishing; the safe way to act if it's genuine
- Already clicked? — the immediate recovery steps (change password, enable 2FA, watch for fraud, run a scan)