phishing-pretext

This fragment is purely declarative configuration with no direct technical capability for malware (no network/file/process/dynamic execution). However, it explicitly defines a workflow for drafting phishing email pretexts and allows implicit invocation, which materially increases the likelihood of misuse in an agentic/automated environment. Further assessment requires reviewing the downstream workflow implementation that consumes $phishing-pretext, since that is where any real side effects would occur.

MALICIOUS. The skill’s stated purpose is to research and draft believable phishing emails, including impersonation, persuasion tactics, and payload justification. Even without code execution or credential handling, its core function is facilitating targeted social engineering against real organizations and employees.