How do I install the Performing Red Team Phishing With Gophish skill?

Run npx skillmds@latest add gabrielmoreira/performing-red-team-phishing-with-gophish in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Performing Red Team Phishing With Gophish safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Performing Red Team Phishing With Gophish?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Performing Red Team Phishing With Gophish free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under Apache-2.

Who published Performing Red Team Phishing With Gophish?

gabrielmoreira (@gabrielmoreira) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Performing Red Team Phishing With Gophish by gabrielmoreira

Name: Performing Red Team Phishing With Gophish
Rating: 4.2 (5 reviews)
Author: gabrielmoreira

Performing Red Team Phishing With Gophish

Automates GoPhish phishing simulation campaigns using the Python gophish library, creating email templates with tracking pixels, configuring SMTP sending profiles, building target groups from CSV, launching campaigns, and analyzing results such as open rates, click rates, and credential submission statistics. Use when running an authorized phishing simulation or security awareness assessment via GoPhish.

gabrielmoreira Updated Sep 9, 2026 17 repo stars

File contents

When to Use

When conducting security assessments that involve performing red team phishing with gophish
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Familiarity with security operations concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Instructions

Install dependencies: pip install gophish requests
Deploy GoPhish server and obtain an API key from Settings.
Use the Python gophish library to automate campaign setup:
- Create email templates with HTML body and tracking
- Configure SMTP sending profiles
- Import target groups from CSV
- Create landing pages for credential capture
- Launch and monitor campaigns
Analyze campaign results: opens, clicks, submitted data, reported.

# For authorized penetration testing and lab environments only
python scripts/agent.py --gophish-url https://localhost:3333 --api-key <key> --campaign-name "Q1 Awareness" --output phishing_report.json

Examples

Create Campaign via API

from gophish import Gophish
from gophish.models import Campaign, Template, Group, SMTP, Page
api = Gophish("api_key", host="https://localhost:3333", verify=False)  # Self-signed cert on localhost lab
campaign = Campaign(name="Q1 Test", groups=[Group(name="Sales Team")],
    template=Template(name="IT Password Reset"), smtp=SMTP(name="Internal SMTP"),
    page=Page(name="Credential Page"))
api.campaigns.post(campaign)

---name: performing-red-team-phishing-with-gophishdescription: Automates GoPhish phishing simulation campaigns using the Python gophish library, creating email templates with tracking pixels, configuring SMTP sending profiles, building target groups from CSV, launching campaigns, and analyzing results such as open rates, click rates, and credential submission statistics. Use when running an authorized phishing simulation or security awareness assessment via GoPhish.license: Apache-2.0--- ## When to Use - When conducting security assessments that involve performing red team phishing with gophish - When following incident response procedures for related security events - When performing scheduled security testing or auditing activities - When validating security controls through hands-on testing ## Prerequisites - Familiarity with security operations concepts and tools - Access to a test or lab environment for safe execution - Python 3.8+ with required dependencies installed - Appropriate authorization for any testing activities ## Instructions 1. Install dependencies: `pip install gophish requests` 2. Deploy GoPhish server and obtain an API key from Settings. 3. Use the Python gophish library to automate campaign setup: - Create email templates with HTML body and tracking - Configure SMTP sending profiles - Import target groups from CSV - Create landing pages for credential capture - Launch and monitor campaigns 4. Analyze campaign results: opens, clicks, submitted data, reported. ```bash # For authorized penetration testing and lab environments only python scripts/agent.py --gophish-url https://localhost:3333 --api-key <key> --campaign-name "Q1 Awareness" --output phishing_report.json ``` ## Examples ### Create Campaign via API ```python from gophish import Gophish from gophish.models import Campaign, Template, Group, SMTP, Page api = Gophish("api_key", host="https://localhost:3333", verify=False) # Self-signed cert on localhost lab campaign = Campaign(name="Q1 Test", groups=[Group(name="Sales Team")], template=Template(name="IT Password Reset"), smtp=SMTP(name="Internal SMTP"), page=Page(name="Credential Page")) api.campaigns.post(campaign) ```

Frequently asked questions