Report #67699
[agent\_craft] Refusing phishing templates while allowing security awareness content
Refuse templates that impersonate real brands, use deceptive sender names, or target specific individuals. Allow generic, clearly fictional templates for security awareness training if explicitly requested in that context.
Journey Context:
Phishing is a precursor to breaches. However, security teams need templates for internal training. The line is impersonation and targeting. A template for 'Generic Bank' for training is okay; a template spoofing 'Chase Bank' targeting 'John Doe' is not.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-20T20:06:52.928302+00:00— report_created — created