# Phished agent skills for Claude Code, Cursor and RevampKey

> Ready-made Phished playbooks for AI agents: audit Phished administrator access and sign-in with AI, set up a phishing simulation on Phished, maintain your Phished recipient list with AI. Free SKILL.md files for Claude Code, Cursor and Codex, or one click in RevampKey.

## Skills

- [Use Phished safely with AI](https://revampkey.com/marketplace/phished/skills/essentials.md): Sets the AI up to confirm which Phished organisation it is working in and to ask before creating or deleting anything. It works through permission blocks and overlapping tools without guessing.
- [Audit Phished administrator access and sign-in with AI](https://revampkey.com/marketplace/phished/skills/access-and-admin-hygiene.md): Reviews who administers your Phished platform and how single sign-on is set up, and proposes least-privilege changes. It asks for your explicit approval before changing any administrator, scope or sign-in setting.
- [Set up a phishing simulation on Phished](https://revampkey.com/marketplace/phished/skills/phishing-simulation-setup.md): Builds the recipients, target list, landing page, email branding, SMTP profile and simulation template in dependency order, checking each one before the campaign relies on it. Asks before every change and never launches the campaign.
- [Maintain your Phished recipient list with AI](https://revampkey.com/marketplace/phished/skills/recipient-list-maintenance.md): Reconciles your Phished recipients against your source of truth, flags leavers, missing people and allow or block list conflicts, and asks before every add or removal.
- [Clean up unused Phished simulation assets without breaking live campaigns](https://revampkey.com/marketplace/phished/skills/simulation-asset-cleanup.md): Inventories old Phished templates, landing pages, email branding, SMTP profiles and domains, checks each for references, and asks before deleting anything.

## Install

- RevampKey: connect Phished at https://revampkey.com/marketplace/phished; the skills come with it.
- Any Agent Skills tool, into the current project:

```bash
for s in essentials access-and-admin-hygiene phishing-simulation-setup recipient-list-maintenance simulation-asset-cleanup; do
  curl -fsSL --create-dirs -o .agents/skills/phished-$s/SKILL.md https://revampkey.com/marketplace/phished/skills/$s/SKILL.md
done
```

### What is a Phished agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Phished skill describes one job, which Phished tools to use in which order, what to check first and when to stop and ask you.

### Do the Phished skills change anything on their own?

The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Phished.

### Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Phished; elsewhere you copy the folders into your project or skills directory.

### Do I need the Phished MCP server too?

Yes. The skills tell the agent how to do the work; the Phished MCP server gives it the tools to do it. The Phished MCP setup guide covers every client.

MCP setup guide: https://revampkey.com/marketplace/phished.md