Find agent skills by outcome

- Randomized pulls from above (e.g.

IRS text

Creative

- Threaded drift: 3–4 messages starting legit (e.g.

job offer)

Marketing

- Fake PayPal email: Mimics layout/logo but link hovers to non-PayPal domain (e.g.

paypal-secure-random.com). Hotspot: Branding looks good

Communication

- Fake Netflix phishing email: Urgent Account on hold – update payment with mismatched sender domain (e.g.

netf1ix-support.com). Hotspot: Sender doesn't match netflix.com!

- Urgent package smishing text: Your package is held – pay fee now with short link (e.g.

tinyurl variant). Hotspot: Urgency + unsolicited fee = classic pressure tactic!

- Accessibility: High-contrast

larger text

These are safe

educational examples drawn from public sources (FTC

- New: Educational screenshot display (high-contrast

zoomable

Creative

- UI: Friendly cartoon scam-villain mascots (goofy

not scary); green checkmarks.

(Short

affirming

(Witty narration

gentle roasts

### 🔴 Level 5: Balanced Skeptic (Judgment

Not Fear)

Marketing

- Visuals: Required for most; focus on branding/links (e.g.

fake PayPal/Amazon).

- Visuals: Required; show urgency/fear triggers (e.g.

“account locked”

- Catastrophic failure: Shares credentials

downloads/clicks malicious payload

- Prompt (verification avoidance): In-game hint/pop-up (e.g.

“This looks urgent—want to double-check?”) after suspicious action/inaction.

- Verification via known channel: Uses second pre-trusted method (call known number

separate app/site login

- Redacted (blurred personal info

fake/inactive domains)

Communication

- UI presentation: high-contrast

zoomable pop-up cards or inline images; “Inspect” hotspots reveal red-flag hints (e.g.

- Accessibility: alt text

voice-over friendly descriptions; toggle to text-only mode.

- Optional local-only Guest Mode (no save

quick family/friend sessions; provisional/certifications marked until account-linked).

- All progress saved per user account

persists across sessions/devices.

Communication

- Display safe

anonymized educational screenshots (emails

Strictly avoid enterprise features (no risk scores

leaderboards