social-eng-phishing

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is to conduct phishing campaigns and simulated credential capture against real users. There is no clear malicious exfiltration path in the text and the GoPhish reference appears official, but the skill materially enables offensive social engineering and real-world actions, so overall risk is high even if malware confidence is low.