Grok BotSecurityVulnerability huntingAI score · 82/100AI-assisted edit · no obvious prompt-injection riskX

Check Suspicious Emails for Phishing with Grok Bot

Paste full email → run detection prompt → get analysis of hidden links, sender mismatches, and urgent-request red flags

BeginnerStepsPromptTip
Who
Users who receive suspicious emails and need a quick phishing risk assessment
You get
Identify potential phishing indicators and receive an AI confidence assessment without clicking any links or attachments
You need
Grok Bot

Constraints

No additional configuration needed. Prerequisites: access to Grok Bot, and the text of the suspicious email to examine. Copy the full email (including sender headers) into the chat, then attach the detection prompt.

What they did

The source account @GrokBotUses shared a prompt template for using Grok Bot to detect phishing indicators in suspicious emails, stating that users are applying this method to analyze email risks without clicking links.

How it went

The source did not provide specific test cases or quantitative results; it was published as a reusable detection template (author_report).

Worth knowing

The prompt explicitly instructs the AI not to click links or open attachments, performing static text analysis only. This cannot replace actual sandboxed security testing. For sophisticated phishing attacks (e.g., homograph domains, same-origin redirect chains), AI judgment may have limitations, and critical decisions still require human review.

Steps

  1. Paste email and request analysis

    Copy the complete content of the suspicious email (including sender address, subject, body, and any visible link text) into the Grok Bot chat. Then send the detection prompt provided by the source. Grok Bot will analyze hidden links, whether the sender address matches the display name, the presence of urgent requests, and other common phishing indicators, explaining its reasoning and confidence level.

    Execution prompt · Source text。Grok Bot chat input, sent immediately after the pasted email content

    Check this email for signs of phishing: hidden links, sender mismatches, urgent requests. Change nothing. Don't click links or open attachments. Explain what you found and how sure you are.

Prompt you can copy

Reference prompt · Editorial suggestion。Confirm the destination, input variables and output format before use.

This block is the prompt. Ads are never placed here.

No prompt needed — just follow the steps.

After pasting the full email, send the detection prompt from the step directly.

Source

可疑邮件钓鱼检查：不点链不打开附件 · GrokBotUses · X · 2026-10-18T14:52:34.000Z

Comments & feedback

Tried this method? Share results, problems or improvements. Comments appear after moderation. Please avoid sensitive information.

Loading…

    Related