Find agent skills by outcome

- v1.3.1: Added safe educational visual integration (screenshots from reputable sources)

visual usage guidelines by level

All visuals credited lightly (e.g.

Inspired by FTC consumer advice examples) and framed as safe simulations only.

- Randomized pulls from above (e.g.

IRS text

Creative

- Threaded drift: 3–4 messages starting legit (e.g.

job offer)

- Urgent package smishing text: Your package is held – pay fee now with short link (e.g.

tinyurl variant). Hotspot: Urgency + unsolicited fee = classic pressure tactic!

These are safe

educational examples drawn from public sources (FTC

Communication

- Fake Netflix phishing email: Urgent Account on hold – update payment with mismatched sender domain (e.g.

netf1ix-support.com). Hotspot: Sender doesn't match netflix.com!

Marketing

- Fake PayPal email: Mimics layout/logo but link hovers to non-PayPal domain (e.g.

paypal-secure-random.com). Hotspot: Branding looks good

- New: Educational screenshot display (high-contrast

zoomable

- Accessibility: High-contrast

larger text

Creative

- UI: Friendly cartoon scam-villain mascots (goofy

not scary); green checkmarks.

(Witty narration

gentle roasts

### 🔴 Level 5: Balanced Skeptic (Judgment

Not Fear)

(Short

affirming

Marketing

- Visuals: Required for most; focus on branding/links (e.g.

fake PayPal/Amazon).

- Visuals: Required; show urgency/fear triggers (e.g.

“account locked”

- Prompt (verification avoidance): In-game hint/pop-up (e.g.

“This looks urgent—want to double-check?”) after suspicious action/inaction.

- Catastrophic failure: Shares credentials

downloads/clicks malicious payload

- Verification via known channel: Uses second pre-trusted method (call known number

separate app/site login

- Accessibility: alt text

voice-over friendly descriptions; toggle to text-only mode.

Communication

- Display safe

anonymized educational screenshots (emails

Communication

- UI presentation: high-contrast

zoomable pop-up cards or inline images; “Inspect” hotspots reveal red-flag hints (e.g.

- Redacted (blurred personal info

fake/inactive domains)

Strictly avoid enterprise features (no risk scores

leaderboards