{"slug":"detecting-email-account-compromise","source_name":"detecting-email-account-compromise","name":"Detecting Email Account Compromise","description":"Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.","version":1,"lift":{"pass_rate_delta_pts":9.09,"pass_rate_pct":13.6,"total_cases":22,"passed_cases":3,"tokens_delta_pct":23.7,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T01:56:37.577677+00:00"},"skill_score":0.1364,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":9.09,"with_pass_pct":13.6,"without_pass_pct":4.5,"tokens_delta_pct":23.7,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-28T01:56:37.577677+00:00","run_id":"03dd81c5-5d15-404a-8725-daed2d7e3a87","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"9ce348a9e090a80cb5b19741cdb82911d8004a9614cd1a82d4290f00eaa4f7c4","raw_url":"https://app.decimal.ai/s/detecting-email-account-compromise/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/detecting-email-account-compromise"}