Phished agent skills for Claude Code, Cursor and RevampKey

5 ready-made playbooks that teach an AI agent how to do real Phished work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect Phished

Connect Phished once and all 5 skills install themselves and stay up to date. Mac, Windows and Linux.

All 5 Phished skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereAsks before writing2 Phished tools

Use Phished safely with AI

Sets the AI up to confirm which Phished organisation it is working in and to ask before creating or deleting anything. It works through permission blocks and overlapping tools without guessing.

Use it when

You have just connected Phished and want to know what the assistant can safely do.
You want to add or remove recipients, administrators or domains and need a confirmation step first.
A Phished request was refused for permissions and you want to know what to do next.

Tools it uses

delete-recipient
delete-recipient-by-email

Example

Remove the three leavers from the Finance department in our Phished organisation, after you confirm which organisation we are in.

Before I change anything, please confirm the organisation: is this the Northwind Ltd account? I found the three Finance recipients I think you mean. Here are the records I would delete, with their email addresses. Deleting a recipient cannot be undone, so reply yes to proceed with these three.

Use in RevampKeyRead the full skill →

Asks before writing7 Phished tools

Audit Phished administrator access and sign-in with AI

Reviews who administers your Phished platform and how single sign-on is set up, and proposes least-privilege changes. It asks for your explicit approval before changing any administrator, scope or sign-in setting.

Use it when

A colleague has left and their Phished admin access needs removing
You want to check who has organisation-wide administrator rights
You are changing single sign-on and need to avoid locking the team out

Tools it uses

create-sso-configuration
create-administrator
create-department
create-location
delete-administrator
delete-department
delete-location

Example

Review our Phished administrators and tell me who has broad access they might not need.

I found 6 administrators in the organisation. 4 are scoped to a single department, and 2 have organisation-wide reach. One of the broad accounts looks like a shared login, which hides who acted. I have not changed anything. Do you want me to propose scoped replacements, and should I wait for your explicit yes before removing either account?

Use in RevampKeyRead the full skill →

Asks before writing7 Phished tools

Set up a phishing simulation on Phished

Builds the recipients, target list, landing page, email branding, SMTP profile and simulation template in dependency order, checking each one before the campaign relies on it. Asks before every change and never launches the campaign.

Use it when

Setting up a new phishing simulation for a department
Preparing a test simulation for a small group before a wider rollout
Rebuilding a simulation whose assets were lost or misconfigured

Tools it uses

create-recipient
create-target-list
create-landing-page
create-email-branding-template
create-smtp-profile
create-domain
create-simulation-template

Example

Set up a phishing simulation for the finance department, with a password-reset lure, and check everything is ready before we launch.

I checked the finance department's existing recipients and found 42 people, 3 of whom are already on a target list. I'd reuse the existing 'Password reset notice' landing page and create one new email branding template. Before I create anything, can you confirm the sending domain for the SMTP profile is one the organisation controls?

Use in RevampKeyRead the full skill →

Asks before writing2 Phished tools

Maintain your Phished recipient list with AI

Reconciles your Phished recipients against your source of truth, flags leavers, missing people and allow or block list conflicts, and asks before every add or removal.

Use it when

After a joiner, mover and leaver round in HR
Before a campaign, to check the population is current
When someone is unexpectedly missing from simulation results

Tools it uses

delete-recipient-by-email
delete-recipient

Example

Compare our Phished recipients with the HR export I'm pasting and tell me who to add, who to remove, and any block-list conflicts.

Organisation confirmed as Acme EU. Source: HR export of 12 March. Population: 412 in the export, 421 in Phished. Missing to add: 6. Stale to remove: 15, of which 11 are confirmed leavers and 4 are bad addresses; 2 of the stale records are in an active simulation, so I've deferred them. Conflicts: 3 people are on the block list. Nothing has been changed yet. Shall I add the 6 people in batch one?

Use in RevampKeyRead the full skill →

Asks before writing4 Phished tools

Clean up unused Phished simulation assets without breaking live campaigns

Inventories old Phished templates, landing pages, email branding, SMTP profiles and domains, checks each for references, and asks before deleting anything.

Use it when

A year of test templates is cluttering the simulation library
A domain from an old sending setup is being retired
Before a platform review, to remove duplicate branding and landing pages

Tools it uses

delete-landing-page
delete-button-response
delete-email-branding-template
delete-smtp-profile

Example

Find the Phished templates and landing pages not used in the last six months and propose which ones we can remove.

I found 14 candidates in the Marketing organisation: 9 low-risk duplicate templates, 3 unused landing pages, and 2 branding templates that still back a dormant template. I checked each against the campaigns list and removed nothing yet. Shall I delete the 9 low-risk templates you approve?

Use in RevampKeyRead the full skill →

Get all 5 without copying a file

RevampKey adds the skills when you connect Phished, updates them for you and removes them when you disconnect.

Download RevampKey

How Phished skills work

Connect Phished
The Phished MCP server gives the agent its tools.
Ask in plain words
“Review our Phished administrators and tell me who has broad access they might not need.” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install Phished skills

In RevampKey the skills install themselves when you connect Phished. In other tools each skill is one folder with a SKILL.md file, and you also need the Phished MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect Phished. All 5 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “Review our Phished administrators and tell me who has broad access they might not need.”
Download RevampKeyConnect Phished · 1 click
Get RevampKey to connect Phished
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and Phished is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials access-and-admin-hygiene phishing-simulation-setup recipient-list-maintenance simulation-asset-cleanup; do curl -fsSL --create-dirs -o .claude/skills/phished-$s/SKILL.md https://revampkey.com/marketplace/phished/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the Phished MCP server in Claude Code.

Run this in your project folder to add all 5 skills:

for s in essentials access-and-admin-hygiene phishing-simulation-setup recipient-list-maintenance simulation-asset-cleanup; do
  curl -fsSL --create-dirs -o .claude/skills/phished-$s/SKILL.md https://revampkey.com/marketplace/phished/skills/$s/SKILL.md
done

Ask in plain language, for example “Review our Phished administrators and tell me who has broad access they might not need.”

Into the shared .agents/skills folder

Connect the Phished MCP server in Cursor.

Run this in your project folder to add all 5 skills:

for s in essentials access-and-admin-hygiene phishing-simulation-setup recipient-list-maintenance simulation-asset-cleanup; do
  curl -fsSL --create-dirs -o .agents/skills/phished-$s/SKILL.md https://revampkey.com/marketplace/phished/skills/$s/SKILL.md
done

Ask in plain language, for example “Review our Phished administrators and tell me who has broad access they might not need.”

Into the shared .agents/skills folder

Connect the Phished MCP server in Codex.

Run this in your project folder to add all 5 skills:

for s in essentials access-and-admin-hygiene phishing-simulation-setup recipient-list-maintenance simulation-asset-cleanup; do
  curl -fsSL --create-dirs -o .agents/skills/phished-$s/SKILL.md https://revampkey.com/marketplace/phished/skills/$s/SKILL.md
done

Ask in plain language, for example “Review our Phished administrators and tell me who has broad access they might not need.”

Into the shared .agents/skills folder

Connect the Phished MCP server in VS Code.

Run this in your project folder to add all 5 skills:

for s in essentials access-and-admin-hygiene phishing-simulation-setup recipient-list-maintenance simulation-asset-cleanup; do
  curl -fsSL --create-dirs -o .agents/skills/phished-$s/SKILL.md https://revampkey.com/marketplace/phished/skills/$s/SKILL.md
done

Ask in plain language, for example “Review our Phished administrators and tell me who has broad access they might not need.”

RevampKey or copy the files?

In RevampKey

One click when you connect Phished
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the Phished MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

Phished skills FAQ

What is a Phished agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Phished skill describes one job, which Phished tools to use in which order, what to check first and when to stop and ask you.

Do the Phished skills change anything on their own?

The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Phished.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Phished; elsewhere you copy the folders into your project or skills directory.

Do I need the Phished MCP server too?

Yes. The skills tell the agent how to do the work; the Phished MCP server gives it the tools to do it. The Phished MCP setup guide covers every client.

Phished MCP server setup · This page as Markdown

Put Phished’s best workflows in your agent

Download RevampKey, connect Phished and ask your first question in about a minute.

Download RevampKey Connect Phished · 1 click

All 5 Phished skills

Use Phished safely with AI

Use it when

Tools it uses

Audit Phished administrator access and sign-in with AI

Use it when

Tools it uses

Set up a phishing simulation on Phished

Use it when

Tools it uses

Maintain your Phished recipient list with AI

Use it when

Tools it uses

Clean up unused Phished simulation assets without breaking live campaigns

Use it when

Tools it uses

Get all 5 without copying a file

How Phished skills work

How to install Phished skills

RevampKey or copy the files?

In RevampKey

Copy into your project

Phished skills FAQ

Put Phished’s best workflows in your agent

Skills for related tools