Vishing Pretext Call Assessment
Plan, script and track authorized voice-phishing tests that measure staff susceptibility to phone social engineering
- Repository
- mukul975/Anthropic-Cybersecurity-Skills
- Stars
- 35,430
- Licence
- Apache-2.0
- Files
- 7 files
What it does
This skill teaches an AI agent how a security tester runs an authorized phone-based social engineering test. It covers gathering public information about a client's organization, writing believable caller scenarios such as a fake IT help desk call, handling objections, and recording outcomes. A bundled script generates pretext templates and a tracker logs call results and calculates susceptibility metrics for a security awareness report. It is meant for red team engagements where the client has given written permission.
Great for
- Security consultants running an approved vishing engagement for a client
- Security awareness teams who want to measure how staff respond to phone pretexting
- Red team trainers building scenarios and reporting templates for practice
Skip it if
- Anyone calling people without written authorization, since the scripts are designed to extract passwords, MFA codes and wire transfers and this is fraud without consent
- Individuals targeting a specific person or organization for personal or criminal gain
- Organizations without a legal review of call recording, because recording laws vary by location and the skill does not provide legal advice
Try asking
- “Plan an authorized vishing test against a mid-size company's helpdesk using a password reset pretext”
- “Generate pretext call templates for an executive assistant and finance scenario for a client-approved engagement”
- “Log results from today's pretext calls and calculate the susceptibility metrics for the client report”
- “Write objection-handling responses for a facilities badge-update pretext”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.
conducting-social-engineering-pretext-call.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip conducting-social-engineering-pretext-call.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip conducting-social-engineering-pretext-call.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Only use with written scope, an approved target list and client-approved pretexts; the skill itself does not verify authorization
- Review the sample scripts, which contain offensive wording such as asking for passwords and authenticator codes, before running or adapting them
- Use the tracker's reporting and the awareness-training outputs to improve controls rather than to shame individual employees
What's inside
- assets/template.md
- references/api-reference.md
- references/standards.md
- references/workflows.md
- scripts/agent.py
- scripts/process.py
- SKILL.md
Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.