Skill UI

Security guardrails embedded in the mortgage plugin that block prompt injection and social-engineering tricks, stop system prompt extraction, guard PII and pricing logic, enforce workflow phases, and ensure conversational inputs stay within refinance scope.

Design and run comprehensive social engineering penetration tests covering phishing, vishing, smishing, and physical pretexting using GoPhish, SET, OSINT, and controlled campaigns to measure human security resilience and uncover training gaps.

Guides red teams through planning and executing authorized vishing pretext calls, covering OSINT research, believable scenarios, objection handling, and data collection so assessors can evaluate employee verification habits and security awareness controls during security assessments or audits.

Collects publicly available data about a target organization to map attack surfaces, identify social engineering paths, leaked credentials, tech stack, and physical assets prior to red-team operations.