mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-06-13 14:44:58 +03:00
c21af3347e
- Add scripts/agent.py and references/api-reference.md to all remaining skills - Update all 648 LICENSE files: copyright now reads 'Mahipal' - Add implementing-security-monitoring-with-datadog (new skill with full anatomy) - All 649 skills now have: SKILL.md, LICENSE, scripts/agent.py, references/api-reference.md
1.9 KiB
1.9 KiB
Social Engineering Pretext Call — API Reference
Libraries
| Library | Install | Purpose |
|---|---|---|
| requests | pip install requests |
API integration with tracking platforms |
| twilio | pip install twilio |
Programmatic phone call management |
| jinja2 | pip install Jinja2 |
Pretext script template rendering |
Pretext Call Phases
| Phase | Description |
|---|---|
| Reconnaissance | Research target name, role, department, reporting chain |
| Pretext Development | Create believable scenario and script |
| Call Execution | Make the call, follow script, adapt to responses |
| Documentation | Record outcome, information obtained, duration |
| Analysis | Calculate success rates, identify vulnerable departments |
Success Criteria Categories
| Category | Description |
|---|---|
| Full Success | Target provided credentials, access, or completed action |
| Partial Success | Target revealed organizational info but not credentials |
| Failed | Target refused or became suspicious |
| Reported | Target reported the call to security team |
Key Metrics
| Metric | Formula |
|---|---|
| Success Rate | successful_calls / total_calls x 100 |
| Report Rate | calls_reported_to_security / total_calls x 100 |
| Avg Call Duration | total_duration / total_calls |
| Dept Vulnerability | dept_successes / dept_total x 100 |
Legal Considerations
| Requirement | Description |
|---|---|
| Written Authorization | Signed Rules of Engagement from client |
| Recording Consent | Follow state/jurisdiction recording laws |
| Scope Boundaries | Only call authorized targets |
| Data Handling | Securely store any obtained credentials, delete after report |