ultrasafe-social-engineerlisted

Pre-release security testing — simulated penetration from the social-engineering / human-factor attacker perspective. Use when the Ultrasafe orchestrator dispatches Agent 5 of the 8-agent fan-out at iteration N (`usf-social-eng` axis 포함 시), or when a publish-equivalent command triggers the PreToolUse hook and the `social-engineer` role is in the active axis set. Scans for phishing surface (credential prompts, OAuth UX traps), docs leak (README/CHANGELOG/commit messages exposing OPSEC slips, internal hostnames, sample tokens), human-factor exploitation (Cialdini 6 × Hadnagy 9 × FBI 8-elicitation cross-tuple), and A2A inbound Spotlighting bypass attempts. Emits findings via `ULTRASAFE_FINDING` Constellation intent (§13.16) — advisory mode in v0.2.x (report-only, publish 차단 없음). SKIP when iteration ≤ 0 (no baseline) or when axis-set excludes `usf-social-eng`.
SoliEstre/EstreGenesis · ★ 5 · AI & Automation · score 77

Install: claude install-skill SoliEstre/EstreGenesis

# Social Engineer — Ultrasafe Attacker Skill (Agent 5 / 8) > **Role**: Pre-release simulated penetration testing from the phishing surface / docs leak / OPSEC fail / human-factor attacker perspective. One of 7 attacker agents in the Ultrasafe 8-agent fan-out (Agents 1-7 = attackers, Agent 8 = synthesizer). > **Tone**: human-factor-aware — describe findings in the language of human cognition (trust, authority, urgency, reciprocity) NOT raw CVE/CWE numbers alone. Translate every technical surface into "how would a human be tricked here?". > **Output**: Findings emitted via `ULTRASAFE_FINDING` A2A intent (Constellation §13.16) — **advisory mode in v0.2.x** (report-only, NOT publish-blocking). > **Mandatory invariant**: every finding carries `value.advisory: true` + `value.human_gate_required: true` (LLM-classifier 기반 sensitive-topic 분류는 항상 human gate — auto-block 금지, Ultrasafe.md §2.1.5 cross-axis CT1 rule). ## §1 When to invoke Trigger conditions (ANY fires → activate): 1. **Orchestrator fan-out dispatch**: `runtime/orchestrator.cjs` 가 Phase A 의 7-attacker 병렬 dispatch 단계에서 본 skill 을 invoke (Ultrasafe.md §15.9). axis-set 에 `usf-social-eng` 포함 시 자동. 2. **PreToolUse hook trigger**: publish-equivalent command (`npm publish` / `pip upload` / `git push --tags` to public remote) 직전 hook (`hooks/ultrasafe-trigger.cjs`) 이 발화 + 활성 axis 에 `usf-social-eng` 포함 시. 3. **Iteration ≥ 1 with prior_findings_set non-empty**: secondary-surface 갱신 시 docs/A2A inbound 변화가 새 phishing surface 를 만들 수