Social engineering testing - phishing, pretexting, vishing, and physical security assessment techniques.
SkillScore95Maintained
Automatic
◆Security & AppSec pack
Last verified 8/18/2026
What it changes
Passed 21 of 22 test cases with the skill, and 20 of 22 without it.
Without skill91%
With skill95%
Checks it passed that the model alone missed
Specify launching campaign delivery before post-assessment analysis so interaction events like link clicks can be recorded in real time
1 fixed20 passed either way1 still failing0 broke
Pass-rate lift
+5 pp
Tokens
-15%
Agent turns
0%
Response time
-20%
Model gemini-3.6-flashMeasured 8/18/2026v121 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
A test case the skill fixed. Same model, same prompt, with and without the skill.
Prompt
In a formal human-factor assessment, once campaign scope is approved and pretext materials are authored, what is the immediate next phase in the standard workflow?
What was checked, without and with the skill
Checked
Without skill
With skill
Specify launching campaign delivery before post-assessment analysis so interaction events like link clicks can be recorded in real time
Missed
Passed
case-08 · gemini-3.6-flash · 8/18/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md22 linessingle file
Social Engineering
Test human-factor security through authorized social engineering campaigns.