social-engineering-defense-drill

by harrylabsj

Install this Skill

curl -fsSL -o social-engineering-defense-drill.zip https://skill.seembox.com/api/v1/skills/social-engineering-defense-drill/download && unzip social-engineering-defense-drill.zip

Download social-engineering-defense-drill.zip

SKILL.md About

---
name: Social Engineering Defense Drill
description: Scenario-based practice that walks users through Web3 social engineering attacks — fake support, impersonation, urgency traps — and builds resistance through structured analysis.
---

# Social Engineering Defense Drill

## Overview

Social Engineering Defense Drill is a scenario-based practice skill that helps users recognize, analyze, and resist Web3 social engineering attacks. Instead of a generic "don't trust anyone" warning, this skill walks users through specific techniques attackers use — urgency, authority impersonation, emotional manipulation, false scarcity — and builds resistance through structured analysis of real scenarios.

This skill does **not** investigate scammers, verify identities, or connect to any chain. It works from the message or scenario the user provides.

## When to Use This Skill

Use this skill when:
- You received a suspicious DM, Telegram message, or Discord ping.
- You are unsure whether a "support" contact is legitimate.
- You want to build stronger habits around social verification.
- You were recently targeted and want to learn from the experience.
- You want to practice recognizing social engineering patterns before encountering them.

## Core Workflow

1. Receive the suspicious message or scenario description from the user.
2. Break down the social engineering techniques being used:
   - **Urgency**: "Act now or lose everything."
   - **Authority impersonation**: Pretending to be support, team members, or influencers.
   - **Emotional manipulation**: Fear, greed, excitement, or guilt.
   - **False scarcity**: "Only 3 spots left," "exclusive access."
   - **Social proof fabrication**: Fake testimonials, bot activity, fake screenshots.
3. Explain why each technique works psychologically.
4. Walk through the "pause and verify" protocol: what to check, where to verify, who to ask.
5. Provide a counter-script the user can use to disengage safely.
6. End with a reflection: what made this feel credible, and how to recognize it faster next time.

## Output Format

For each analysis, the skill provides:
- **Technique breakdown** — which social engineering tactics are present
- **Psychological explanation** — why these techniques are effective
- **Pause-and-verify steps** — concrete actions before responding
- **Disengagement script** — safe words and phrases to exit the interaction
- **Learning reflection** — what to remember for next time

## Safety Boundaries

This skill **cannot** and **will not**:
- Investigate the scammer, trace wallet addresses, or report to authorities on behalf of the user.
- Verify whether a specific contact is a real team member or legitimate representative.
- Guarantee that following the drill will prevent all future scams.
- Access any on-chain data or external services.

**Important disclaimer**: This drill builds pattern recognition, not immunity. Always independently verify contacts through official channels (project website, official Discord announcement channel, verified social media accounts). Scammers continuously evolve their techniques.

**Refusal example**: "I cannot confirm whether this Telegram account is the real support team. Even if the message contains accurate-looking details, always verify through the project's official website or Discord announcement channel."

## Examples

### Example: Fake Support DM

**User provides**: "I got a DM from 'MetaMask Support' saying there's suspicious activity on my wallet and I need to 'validate' my wallet by visiting a link and entering my seed phrase. The account has the MetaMask logo."

**Skill response**:
- **Technique breakdown**:
  - **Authority impersonation**: Using the MetaMask brand name and logo to appear official.
  - **Urgency**: "Suspicious activity" creates pressure to act immediately without thinking.
  - **Emotional manipulation**: Fear of losing funds overrides rational verification.
- **Psychological explanation**: Authority bias makes us trust branded communications without verifying the source. Urgency suppresses the brain's analytical reasoning — when we feel time pressure, we default to familiar patterns (in this case, complying with "support").
- **Pause-and-verify steps**:
  1. Pause. Real support teams never DM first.
  2. Check: Is this from an official verified account? MetaMask support does not initiate DMs.
  3. Verify: Go to the official MetaMask website (not the link in the DM) and check their support policy.
  4. Ask: Would real support ask for my seed phrase? (No — this is the universal red flag.)
- **Disengagement script**: "I'll check the official support channels and get back to you." Then block and report the account. Do not engage further.
- **Learning reflection**: The MetaMask logo and brand name created a false sense of legitimacy. Remember: any request for your seed phrase is a scam, regardless of how official it looks.

## Acceptance Criteria

- Identifies specific social engineering techniques (not just "it's a scam").
- Explains psychological mechanisms behind each technique.
- Provides actionable disengagement scripts.
- Uses scenario-based analysis, not generic advice.
- Does not claim to verify identities or investigate scammers.
- All responses in English.
- No code execution, API calls, wallet connections, or live chain queries.

_meta.json Metadata

{
  "ownerId": "kn77zzg9p845zanvy6vrf76k7d81mcnm",
  "publishedAt": 1778132443217,
  "slug": "social-engineering-defense-drill",
  "version": "1.0.0"
}