# Phishing

> Email phishing analysis - headers, attachments, URLs

- Skill: `majiayu000/phishing` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/phishing`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/phishing/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/phishing

---


# Phishing Triage

Analyze suspicious emails:
- Header analysis (SPF/DKIM/DMARC)
- Sender reputation
- URL analysis
- Attachment analysis
- Social engineering indicators
- Verdict determination

## Required Context
1. **Email**: .eml file path or headers
2. **Attachments**: If separate analysis needed
3. **URLs**: If already extracted

## Output
- Verdict: PHISHING / SUSPICIOUS / SPAM / LEGITIMATE
- IOCs extracted
- Recommended actions

## Example
```
/phishing
Email: /samples/suspicious.eml
```