{"slug":"conducting-phishing-incident-response","source_name":"conducting-phishing-incident-response","name":"Conducting Phishing Incident Response","description":"Responds to phishing incidents by analyzing reported emails, extracting indicators, assessing credential compromise, quarantining malicious messages across the organization, and remediating affected accounts. Covers email header analysis, URL/attachment sandboxing, and mailbox-wide purge operations. Activates for requests involving phishing response, email incident, credential phishing, spear phishing investigation, or phishing remediation.","version":1,"lift":{"pass_rate_delta_pts":9.09,"pass_rate_pct":18.2,"total_cases":22,"passed_cases":4,"tokens_delta_pct":100.3,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T01:08:41.955182+00:00"},"skill_score":0.1818,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":9.09,"with_pass_pct":18.2,"without_pass_pct":9.1,"tokens_delta_pct":100.3,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-07-28T01:08:41.955182+00:00","run_id":"5464aca4-0cc5-4370-abe3-98f6af5c14cd","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"f00a5f9c89cec1d5fc2fdb52b5f63ca237b2ee221fc77c064f4926fac16a64b9","raw_url":"https://app.decimal.ai/s/conducting-phishing-incident-response/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/conducting-phishing-incident-response"}