Skip to content
Get packs

Spearphishing Simulation Campaign

Plans and runs authorized, targeted phishing simulations to test people and email defenses.

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
7 files

What it does

This skill gives an AI agent a structured playbook for red-team exercises that simulate targeted phishing against specific named staff. It covers building believable pretexts from OSINT, preparing lookalike domains with SPF/DKIM/DMARC, running GoPhish-based campaigns in waves, and calculating click and credential-capture metrics. It also includes Python helper scripts that call the GoPhish API and check DNS email-authentication records.

Great for

  • Red teams running authorized, contracted social engineering assessments
  • Security teams testing their own staff's phishing resistance in a lab or approved engagement
  • Security students learning how targeted phishing engagements are structured

Skip it if

  • Anyone without written authorization, since the workflow covers credential harvesting, MFA bypass tools (Evilginx2, Modlishka) and malware-style payloads that are illegal against systems you do not control
  • Non-security teams who would not know how to scope, contain and clean up such a campaign safely; the skill assumes expert judgment

Try asking

  • “Plan a spearphishing simulation against three named finance staff using OSINT notes I have provided, under our signed engagement letter”
  • “Check whether our test domain has correct SPF, DKIM and DMARC records before we launch the GoPhish campaign”
  • “Generate personalized password-expiry templates from a targets CSV for an approved phishing exercise”
  • “Summarize click and credential-submission metrics from the campaign results JSON for the engagement report”
Step-by-step guide: how to use Spearphishing Simulation CampaignInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.

    conducting-spearphishing-simulation-campaign.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip conducting-spearphishing-simulation-campaign.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip conducting-spearphishing-simulation-campaign.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use with written scope, named targets, and a rules-of-engagement document; keep the test environment separate from production mail.
  • Review scripts/agent.py before running: it disables TLS certificate verification (verify=False) and suppresses urllib3 warnings, so only point it at a trusted GoPhish instance.
  • Ask the agent to include cleanup steps and evidence collection, since the skill's validation checklist requires infrastructure teardown after the campaign.

What's inside

  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.