Social Engineering Audit

When to Use

Invoke this skill when assessing:

• Authentication and authorization flows (login, MFA, password reset, account recovery)
• Help desk and customer support procedures
• Identity verification and onboarding processes
• Organizational security posture against targeted attacks
• Account takeover risk via non-technical channels
• Physical access control and personnel security

This is not a penetration test. This is a structured assessment of the human-factor attack surface -- the seams where process, trust, and technology meet.

Attack Surface Taxonomy

1. Pretexting Vectors