phishing-sim

SUSPICIOUS/HIGH-RISK skill. The content is internally consistent and not deceptive, but its stated purpose is to help an AI agent design phishing campaigns, including credential-capture scenarios and attack-like infrastructure choices. There is little malware or supply-chain evidence, yet the offensive social-engineering capability makes the skill high risk.