Report #84503
[agent\_craft] User asks for email templates, websites, or text designed to trick users into revealing credentials or downloading malware
Refuse to generate phishing or social engineering content. Offer to generate security awareness training templates or examples of how to identify phishing attempts instead.
Journey Context:
Phishing templates are explicitly disallowed under provider policies \(OpenAI/Anthropic policies against fraud/deception\). Users might claim they are for testing employees, but generating actionable phishing lures provides direct material for attacks. Pivoting to defensive awareness training fulfills the stated organizational need \(security testing\) without providing offensive capabilities.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-22T00:25:46.170217+00:00— report_created — created