@agenticmail/core 0.9.32 → 0.9.33

package/dist/skills/built-in/replace-lost-stolen-card-expedited.json

@@ -0,0 +1,139 @@
+{
+  "id": "replace-lost-stolen-card-expedited",
+  "name": "Replace a Lost or Stolen Card and Expedite Delivery",
+  "version": "1.0.0",
+  "category": "finance-admin",
+  "tags": [
+    "lost-card",
+    "stolen-card",
+    "card-replacement",
+    "expedited-shipping",
+    "card-lock",
+    "phone-call",
+    "banking-finance"
+  ],
+  "description": "Call the card issuer to (a) immediately lock or cancel a lost or stolen card, (b) order a replacement with the correct shipping speed, and (c) deal with the gap-period plumbing — recurring charges, push-provisioning to mobile wallets, virtual card numbers.",
+  "disclaimer": "Not financial or tax advice. Agent must NEVER share SSN unprompted, NEVER initiate wires above the operator's stated cap, NEVER agree to a hardship plan / settlement that affects credit without explicit ask_operator approval.",
+  "context": {
+    "when_to_use": "Card is missing (left in a cab, stolen wallet, lost in luggage). Speed matters: each hour increases fraud-loss exposure even though Reg E / Reg Z cap user liability. Mid-trip card-loss has the extra wrinkle that the user may need expedited international delivery or a temporary virtual card to keep functioning.",
+    "preconditions": [
+      "User can confirm: physically missing vs definitely stolen (matters for fraud reporting).",
+      "User has the card account info (last 4 from statement / app).",
+      "User is calling from the number on the back of the card or the bank's mobile app.",
+      "User knows their current address and any temporary shipping address (e.g., hotel).",
+      "User has a list of recurring charges that were on the lost card (Netflix, gym, utilities — all need to be updated to the new number)."
+    ],
+    "estimated_call_duration_minutes": 15
+  },
+  "principles": [
+    "Lock first, talk later. Many bank apps have a 'lock card' toggle that pauses authorizations instantly — use it BEFORE the phone call if there's any delay reaching a human.",
+    "Distinguish LOST from STOLEN. Stolen often triggers a fraud-report workflow even if there are no unauthorized charges yet; lost is a simple replace.",
+    "Ask for push-provisioning. Most modern issuers can push a digital card number to Apple Pay / Google Pay / Samsung Pay within minutes of the call, so the user can keep transacting before the physical card arrives.",
+    "Or ask for a VIRTUAL CARD NUMBER (VCN) — some issuers (Cap One Eno, Citi Virtual Card, etc.) generate a number you can use immediately online while waiting for plastic.",
+    "Expedited shipping is usually FREE if the card was lost/stolen — never pay $25 for FedEx Overnight if you ask politely.",
+    "Recurring charges break when the card number changes — unless the issuer participates in 'card account updater' programs. Some merchants get the new number automatically; some don't. Plan to manually update the rest."
+  ],
+  "phrases": {
+    "opener": "Hi, I need to report my card as [lost / stolen] and order a replacement. Before we do anything else, can you immediately lock or cancel the current card number?",
+    "lost_vs_stolen": "To clarify: the card is [definitely stolen — my wallet was taken / missing — I don't believe it was stolen, I likely misplaced it]. Should this be filed as a fraud case or a simple replacement?",
+    "request_push_provisioning": "While the physical card ships, can you push the new card number to my Apple Pay / Google Pay so I can use it immediately?",
+    "request_virtual_card": "Does the card support a virtual card number I can use for online purchases right now while the plastic arrives?",
+    "expedited_shipping_ask": "Given this is a [lost / stolen] situation, can you expedite shipping at no charge? When would I have the new card?",
+    "alternate_address": "I'm currently at [hotel / temporary address] until [date]. Can the card ship there, and if so, what verification do you need at that address?",
+    "check_recurring_updater": "Will my recurring merchants automatically receive the new card number via the network's account-updater service, or do I need to update each one manually? Can you give me a list of which merchants are covered?",
+    "graceful_close": "Thanks. Can you confirm: old card cancelled, new card ordered with expedited delivery to [address], expected arrival [date], digital card pushed to wallet, virtual card number provided if applicable, and give me a reference number plus your name?"
+  },
+  "tactics": [
+    {
+      "name": "Lock first via the app",
+      "when": "If the bank's app supports it.",
+      "script": "Open the app, toggle 'lock card' or 'report missing' BEFORE the call. This stops new authorizations even if you wait on hold for 20 minutes.",
+      "priority": 1
+    },
+    {
+      "name": "Lock-on-call immediately",
+      "when": "First substantive turn.",
+      "script": "Use `opener`. Cancellation is irreversible — but the loss exposure from waiting longer is larger than the inconvenience of cancelling.",
+      "priority": 2
+    },
+    {
+      "name": "Classify lost vs stolen",
+      "when": "After lock.",
+      "script": "Use `lost_vs_stolen`. Stolen + any unauthorized charges → also use `report-fraudulent-transaction` workflow.",
+      "priority": 3
+    },
+    {
+      "name": "Bridge the gap — push to wallet",
+      "when": "Replacement is ordered.",
+      "script": "Use `request_push_provisioning`. Apple Pay / Google Pay / Samsung Pay typically activate within minutes — the user can buy coffee before they walk out of the building.",
+      "priority": 4
+    },
+    {
+      "name": "Bridge the gap — virtual card",
+      "when": "User has online purchases pending.",
+      "script": "Use `request_virtual_card`. VCNs let the user pay online (or a hotel hold) right away."
+    },
+    {
+      "name": "Expedite for free",
+      "when": "Discussing shipping.",
+      "script": "Use `expedited_shipping_ask`. 1-2 day shipping is usually free on lost/stolen replacements — they only charge it if you don't ask."
+    },
+    {
+      "name": "Handle shipping address logistics",
+      "when": "User is traveling or has moved.",
+      "script": "Use `alternate_address`. Bank may require verification (ID at delivery, secondary phone, security question) — ask what's required."
+    },
+    {
+      "name": "Map recurring updates",
+      "when": "Card is being replaced.",
+      "script": "Use `check_recurring_updater`. Ask which networks (Visa Account Updater, Mastercard ABU) are subscribed AND which merchants are NOT — they need manual updating."
+    },
+    {
+      "name": "Audit trail",
+      "when": "Wrapping the call.",
+      "script": "Use `graceful_close`. Confirmation of cancellation + replacement + delivery + digital tools + reference number."
+    }
+  ],
+  "boundaries": [
+    "Do NOT cancel without a replacement ordered if the card is needed for recurring critical bills — coordinate timing.",
+    "Do NOT have the card shipped to an unverified third-party address — fraud risk; if user is traveling, use a hotel with the user's name on the reservation, or hold-at-FedEx.",
+    "Do NOT share full SSN; last 4 plus card info is sufficient.",
+    "Do NOT verify identity by reading back a one-time code the bank just texted (legitimate reps will never ask).",
+    "Do NOT close the call without reference number and an expected delivery date.",
+    "Do NOT pay for expedited shipping without asking for it free first."
+  ],
+  "success_signals": [
+    "Old card number cancelled before the call ends.",
+    "New card ordered, expedited delivery free.",
+    "Digital card pushed to wallet within minutes.",
+    "Virtual card number issued (if needed).",
+    "Account-updater coverage understood for recurring merchants.",
+    "Reference number issued."
+  ],
+  "failure_signals": [
+    "Rep refuses expedited shipping at no charge — escalate to supervisor or use the mobile-wallet push as the bridge.",
+    "Bank doesn't support push-provisioning AND user is traveling without backup card.",
+    "Alternate address can't be verified (escalate or use known-good address).",
+    "Account is flagged for suspended status — escalate to fraud/account services."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm reference number, new card delivery date, digital-wallet card active. Surface to operator the list of recurring merchants that need manual updating. Calendar to do that within 48 hours.",
+    "on_failure": "If delivery fails or address verification blocks: try in-branch pickup (some banks support this). If push-provisioning fails: use a backup card and accept the gap. If the account is suspended: escalate to a fraud supervisor and request a written summary of the suspension reason.",
+    "follow_ups": [
+      "Day +1: confirm digital card works for a small test purchase.",
+      "Day +2 / +3: confirm physical card arrived.",
+      "Day +5: manually update each recurring merchant NOT covered by account-updater.",
+      "Day +30: pull statement to verify no zombie charges from the old card."
+    ]
+  },
+  "required_user_info": [
+    "Card last 4",
+    "Lost or stolen classification",
+    "Current shipping address (home or temporary)",
+    "List of recurring merchants on this card",
+    "Mobile wallet preference (Apple/Google/Samsung Pay)",
+    "Backup payment method available during the gap"
+  ],
+  "contributed_by": "banking-finance agent (v0.9.87 community drop)",
+  "updated_at": "2026-05-20T06:09:47Z"
+}

package/dist/skills/built-in/report-downed-line-gas-smell-911-triage.json

@@ -0,0 +1,130 @@
+{
+  "id": "report-downed-line-gas-smell-911-triage",
+  "name": "Report a Downed Line or Gas Smell — 911 vs. Utility Hotline Triage",
+  "version": "1.0.0",
+  "category": "customer-service",
+  "tags": [
+    "utility",
+    "emergency",
+    "downed-line",
+    "gas-leak",
+    "911",
+    "safety",
+    "phone-call",
+    "utility-telecom"
+  ],
+  "description": "Decide in the first 30 seconds whether a downed power line, gas smell, or other utility hazard is a 911 call, a utility emergency-hotline call, or both — and place the call(s) in the right order with the right information so dispatch reaches the right team fast.",
+  "disclaimer": "This skill saves lives. Do NOT delegate the decision to an AI agent — if the user reports any safety hazard, the AI should immediately advise the user to leave the area and call 911 themselves. The skill below describes what to say WHEN the user (or the agent assisting them remotely) is making those calls. If in any doubt: 911 first, utility second.",
+  "context": {
+    "when_to_use": "Any of: a downed wire (whether or not sparking), a wire across a vehicle / fence / pool, a gas smell indoors or outdoors, a 'rotten egg' / mercaptan odor, a carbon-monoxide alarm sounding, visible flame from a meter or transformer, water main break flooding a structure, or any pole fire / transformer fire.",
+    "preconditions": [
+      "User is in a SAFE LOCATION before making non-emergency calls (away from the hazard, outdoors if gas, well clear if downed line).",
+      "Phone has cellular signal — if landline is the only option and there's a gas smell, leave the structure first and use a neighbor's phone or cell outside.",
+      "Knowledge of the precise address or nearest cross street.",
+      "Description of the hazard (what, where, how long present, any visible damage or victims)."
+    ],
+    "estimated_call_duration_minutes": 8
+  },
+  "principles": [
+    "SAFETY FIRST. Move to a safe location before any call. For gas smell indoors: leave the building, do NOT operate light switches, garage doors, or anything that sparks (including the phone — leave, then dial). For downed wire: assume it's energised, stay at least 35 feet (10m) away, keep others back, never approach a vehicle in contact with a wire.",
+    "911 IS THE DEFAULT for any hazard with immediate life-safety risk: visible flame, downed wire near people / vehicles / structures, gas leak inside a building, CO alarm with symptomatic occupants, sparking transformer near combustibles. 911 dispatches fire/EMS AND co-notifies the utility — they have direct lines.",
+    "UTILITY EMERGENCY HOTLINE is the right first call only for hazards with NO immediate life-safety risk: a downed wire in an isolated rural field with nobody near, a faint outdoor gas odor at a meter, water main break with no people in danger. When in doubt, 911.",
+    "If you call 911 FIRST, you do NOT also need to call the utility immediately — 911 dispatch will. But call the utility within 30-60 minutes to (a) confirm they got the notification and (b) get a ticket number for follow-up.",
+    "Recognise wrong-queue: the utility's general customer service line is NOT the emergency hotline. Utilities publish a separate gas-emergency number (often 1-800-something) — use that, not the billing line. If you accidentally land in general care, say 'I have an emergency — gas leak / downed line' and they will transfer you immediately. Stay on the line; do NOT hang up to redial.",
+    "Be CONCRETE on the call. Address, what you see, how many people are or may be in danger, whether anyone is hurt. Reps and 911 dispatchers parse keywords — 'downed wire across a car' triggers a different response than 'a wire on the ground'."
+  ],
+  "phrases": {
+    "opener_911": "This is an emergency. I'm reporting [a downed power line / a gas leak / a transformer fire / a CO alarm with symptoms] at [precise address or cross street]. [Number] people may be at risk. The hazard started [time]. Nobody is touching the wire / nobody is in the building / [status of victims].",
+    "opener_utility_hotline": "I'm reporting [the hazard] at [address]. Not an active life-safety emergency, but I want it reported and to get a crew dispatched. Started [time]. I'm calling from a safe distance.",
+    "opener_post_911": "Hi, I already called 911 — fire / police are on the way. I'm following up with the utility to make sure you also have a ticket. The hazard is [description] at [address]. Can you confirm the dispatch and give me a ticket number?",
+    "queue_check_emergency": "Quick — am I on the emergency / gas-emergency line, or general customer service? If general, I need to be transferred to emergency immediately — there's [hazard] at [address].",
+    "describe_hazard": "Specifically what I see: [wire down / wire arcing / wire on a vehicle / strong rotten-egg smell / flame at meter / CO alarm sounding / etc.]. Conditions: [raining / windy / vehicles passing / structures nearby]. People: [nobody nearby / N people sheltered at [location] / N people I cannot account for].",
+    "ask_eta": "What's the ETA for a crew? I want to keep people back — should I expect minutes or longer?",
+    "ask_evacuation_radius": "How far back should I keep people? I'm currently at about [distance]. Should I widen or evacuate any structures?",
+    "ask_ticket": "Can I get a ticket / incident number? I'll be onsite keeping people back until crews arrive.",
+    "graceful_close": "Understood — ticket [number], crew ETA [time], evacuation distance [feet/meters]. I'll stay clear and keep others back."
+  },
+  "tactics": [
+    {
+      "name": "Move to safety BEFORE calling",
+      "when": "Before any call.",
+      "script": "For gas leak indoors: exit the building, do not flip switches, do not use door openers — those can spark. For downed wire: back away to ≥35 feet (10m). For CO alarm: leave the structure, take occupants outside, count heads. THEN call.",
+      "priority": 1
+    },
+    {
+      "name": "Default to 911 for life-safety risk",
+      "when": "Downed wire near people / structures / vehicles, gas leak indoors, transformer fire near combustibles, CO alarm with symptoms, anything sparking.",
+      "script": "Use `opener_911`. 911 co-notifies the utility — do not delay to find the utility's number first.",
+      "priority": 2
+    },
+    {
+      "name": "Utility hotline first only for isolated, non-life-safety hazards",
+      "when": "Wire down in an isolated field with no road / no people, faint outdoor odor at a meter, water main break with no structures threatened.",
+      "script": "Use `opener_utility_hotline`. Use the dedicated emergency-hotline number, NOT general customer service.",
+      "priority": 3
+    },
+    {
+      "name": "If you landed in the wrong queue, transfer DON'T redial",
+      "when": "You hit general customer service with an emergency.",
+      "script": "Use `queue_check_emergency`. State the emergency explicitly — that triggers an immediate transfer to the gas-emergency / outage-dispatch queue without losing the call. Redialling loses 2-5 minutes.",
+      "priority": 4
+    },
+    {
+      "name": "Describe concretely",
+      "when": "First substantive turn with dispatch.",
+      "script": "Use `describe_hazard`. Dispatchers triage by keywords — specifics like 'wire across a vehicle with occupants' vs. 'wire on grass' produce different crew loadouts and priority.",
+      "priority": 5
+    },
+    {
+      "name": "Get ETA and evacuation radius",
+      "when": "Before ending the call.",
+      "script": "Use `ask_eta` and `ask_evacuation_radius`. The user (or someone with them) is the on-scene safety perimeter until crews arrive."
+    },
+    {
+      "name": "Close the loop with the utility after a 911 call",
+      "when": "Within 30-60 minutes of the 911 call.",
+      "script": "Use `opener_post_911`. Even though 911 co-notifies, calling the utility directly produces a customer-side ticket for follow-up, credit, and verification that the response actually dispatched."
+    }
+  ],
+  "boundaries": [
+    "Do NOT approach a downed wire to 'check if it's live'. Assume it is.",
+    "Do NOT approach a vehicle in contact with a wire — tell occupants to STAY INSIDE the vehicle and not touch metal until crews arrive. Stepping out can complete the circuit and kill them.",
+    "Do NOT operate light switches, doorbells, garage doors, thermostats, or anything electrical inside a building with a gas smell. Sparks ignite gas.",
+    "Do NOT silence a CO alarm and go back to sleep. Evacuate, count occupants, call 911 from outside.",
+    "Do NOT delay calling because you're 'not sure if it's bad enough'. Reporting a possible hazard is free; not reporting one is sometimes fatal.",
+    "Do NOT discuss billing, account, or credit on an emergency call. That's a separate call after the hazard is cleared.",
+    "AGENT-SPECIFIC: An AI agent should NEVER take this call on the user's behalf for an active safety emergency. The agent's role is to tell the user to leave the area and call 911, and to coordinate follow-up calls AFTER the immediate danger is past."
+  ],
+  "success_signals": [
+    "911 dispatch confirmed with crews en route, OR utility emergency hotline ticket issued with crew ETA.",
+    "Evacuation radius known and being maintained.",
+    "All occupants accounted for in a safe location.",
+    "Follow-up ticket number captured from the utility (separate from the 911 incident number)."
+  ],
+  "failure_signals": [
+    "Hold time on the utility emergency line exceeds 5 minutes for an active hazard — hang up and call 911 instead.",
+    "Rep on a general customer-service line tries to handle the emergency without transferring — escalate immediately or hang up and call 911.",
+    "No ETA can be given and the hazard is escalating (fire spreading, more wires falling, gas smell intensifying) — call 911 and evacuate further.",
+    "User cannot reach a safe location to call from — instruct them to leave the area on foot if needed and call from any nearby safe spot."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm dispatch is en route, maintain the safety perimeter, log incident/ticket numbers. Stay on-scene at a safe distance until crews arrive. After resolution, use `outage-credit-applied` for any service-interruption credit and `dispute-usage-spike-meter-reread` if billing is affected.",
+    "on_failure": "If the utility cannot respond or the hazard is worsening, call 911 (again if necessary). Do not re-enter the area. If property damage occurred, document with photos (from a safe distance) for insurance and any negligence claim.",
+    "follow_ups": [
+      "After hazard cleared: confirm the utility's incident report exists and is accurate.",
+      "If property damage / spoilage: file the consequential-damage claim with the utility (separate process from service credit).",
+      "If a downed wire damaged property OR a gas leak caused evacuation: notify homeowner / renter insurance promptly.",
+      "If household has powered medical equipment and outage exceeded the equipment's battery: file medical-baseline paperwork to flag the account for future outages."
+    ]
+  },
+  "required_user_info": [
+    "Precise address or nearest cross street",
+    "Description of the hazard and what is visible",
+    "Number of people potentially affected",
+    "Whether anyone is injured or trapped",
+    "User's current location relative to the hazard",
+    "Phone number for callback"
+  ],
+  "contributed_by": "utility-telecom agent (v0.9.87 community drop)",
+  "updated_at": "2026-05-20T06:09:47Z"
+}

package/dist/skills/built-in/report-elder-or-child-abuse.json

@@ -0,0 +1,117 @@
+{
+  "id": "report-elder-or-child-abuse",
+  "name": "Report Suspected Elder Abuse or Child Abuse",
+  "version": "1.0.0",
+  "category": "emergency-services",
+  "tags": [
+    "elder-abuse",
+    "child-abuse",
+    "aps",
+    "cps",
+    "mandated-reporter",
+    "neglect",
+    "emergency_services"
+  ],
+  "description": "Place a call to Adult Protective Services (APS) or Child Protective Services (CPS), or the state hotline for elder/child abuse / neglect, on behalf of the operator. Many jurisdictions have a dedicated hotline; the agent calls the right one for the state and routes correctly.",
+  "disclaimer": "(1) If the abuse is HAPPENING RIGHT NOW or there is imminent danger, that's call-911-violent-crime-in-progress — not APS/CPS. (2) The operator may be a mandated reporter (teacher, healthcare worker, social worker) — if so, the report is REQUIRED by law in most US states; the agent should NOT discourage. (3) Identify as an AI on the first sentence. (4) Reports can be made anonymously in most states; the operator should know whether their professional role bars anonymity. (5) Knowingly false abuse reports are crimes in every state and cause severe harm to the falsely accused — accuracy matters.",
+  "context": {
+    "when_to_use": "Operator suspects or has witnessed elder abuse / child abuse / neglect and wants to file a report with APS / CPS / the state hotline. Operator is not in immediate danger, the suspected victim is not in immediate danger. (If either is — 911.)",
+    "preconditions": [
+      "Operator's explicit authorisation for this call.",
+      "Victim's information: name, age, address (or last known location), relationship to operator.",
+      "Suspected abuser's information (name, relationship to victim) — to the extent the operator can attest to it.",
+      "Specific observations the operator can describe: what they saw, when, where. Avoid characterisations ('he's abusive'); stick to facts ('there were bruises on her arms when I helped her into the car last Tuesday').",
+      "Operator's contact info (or explicit choice to report anonymously in jurisdictions that allow it).",
+      "Confirmation no imminent danger (else 911)."
+    ],
+    "estimated_call_duration_minutes": 20
+  },
+  "principles": [
+    "Identify as an AI on the first sentence; explain you are relaying for a person who is filing the report.",
+    "Distinguish observations from interpretations. Investigators value facts; characterisations are not actionable.",
+    "If the operator is a mandated reporter, name that — it changes how the intake worker prioritises and how anonymity is handled.",
+    "Don't push the intake worker toward a specific intervention. Describe; let them decide.",
+    "Get a case / intake reference number before disconnecting.",
+    "If at any point the operator describes imminent danger, switch to 911. APS/CPS are the right channel for ongoing concern, NOT acute risk."
+  ],
+  "phrases": {
+    "opener": "Hi — I'm an AI assistant calling on behalf of <operator>. They'd like to make a report of suspected <elder abuse / child abuse / neglect / financial exploitation>. <Mandated reporter or voluntary>. The suspected victim is <name and age> at <address>. May I walk you through what my operator observed?",
+    "factual_walkthrough_prompt": "I'll share what my operator personally observed. I'll flag inference versus observation. Please slow me down whenever you need.",
+    "flag_inference": "(Inference, not direct observation:) <…>",
+    "ask_about_anonymity": "Before I share my operator's contact info — what are the anonymity options for this kind of report in your jurisdiction? My operator has chosen <anonymous / on-record / mandated-reporter on-record>.",
+    "ask_about_followup_window": "Roughly when can my operator expect a follow-up, if at all? They want to know what to expect.",
+    "ask_for_reference": "Could I get an intake reference number, your name, and a callback line in case my operator remembers more?",
+    "escalate_to_911": "Hold on — my operator is telling me <verbatim observation suggesting imminent danger>. I think we need to transfer to 911 immediately. Can you connect us, or should I hang up and dial 911 directly?"
+  },
+  "tactics": [
+    {
+      "name": "Confirm no imminent danger first",
+      "when": "Before dialing APS/CPS.",
+      "script": "Ask operator: 'Is anyone in immediate danger right now? Bruising actively happening, weapon involved, child currently being harmed?' If yes — 911 instead.",
+      "priority": 0
+    },
+    {
+      "name": "Open with the right framing",
+      "when": "First substantive turn.",
+      "script": "Use `opener`, naming the abuse type and the operator's reporter status (mandated vs voluntary).",
+      "priority": 1
+    },
+    {
+      "name": "Walk through observations, flag inferences",
+      "when": "Throughout the call.",
+      "script": "Use `factual_walkthrough_prompt` then `flag_inference` whenever the operator's input shifts from 'I saw X' to 'I think Y'. Investigators distinguish strongly.",
+      "priority": 2
+    },
+    {
+      "name": "Resolve anonymity proactively",
+      "when": "Before sharing operator's contact info.",
+      "script": "Use `ask_about_anonymity`. Most states allow anonymous reports but mandated reporters typically cannot be anonymous."
+    },
+    {
+      "name": "Capture reference + follow-up window",
+      "when": "Before closing.",
+      "script": "Use `ask_for_reference` and `ask_about_followup_window`. Without these the operator has no proof or expectation."
+    },
+    {
+      "name": "Escalate to 911 if anything imminent emerges",
+      "when": "Mid-call the operator describes acute danger.",
+      "script": "Use `escalate_to_911`. APS/CPS will agree; the right channel for acute danger is 911."
+    }
+  ],
+  "boundaries": [
+    "NEVER fabricate or embellish observations. False abuse reports cause real harm AND are criminal in every state.",
+    "NEVER name a suspected abuser unless the operator has direct knowledge of the relationship and the conduct.",
+    "NEVER discourage a mandated reporter from filing.",
+    "NEVER promise the operator a specific outcome (removal, prosecution, intervention). APS/CPS have discretion.",
+    "NEVER use this as a tool in a custody dispute or eldercare-financial dispute. Misuse is reportable and exposes the operator to legal consequences.",
+    "NEVER end the call without an intake reference number unless the intake worker explicitly refuses to give one."
+  ],
+  "success_signals": [
+    "Intake worker accepts the report and gives a reference number.",
+    "Intake worker confirms a follow-up window or a screening timeline.",
+    "Intake worker accepts the operator's anonymity preference where allowed."
+  ],
+  "failure_signals": [
+    "Intake worker says 'this isn't our jurisdiction' — accept the referral, place the next call.",
+    "Intake worker says 'this doesn't rise to our threshold' — relay back to the operator; offer alternatives (local police non-emergency, ombudsman, prosecutor's office).",
+    "Operator changes their mind mid-call — stop the call cleanly. Don't pressure them."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm reference number, follow-up window, anonymity status. Email operator a summary including verbatim observations recorded with the intake worker.",
+    "on_failure": "Email operator the alternative channel the intake worker recommended and offer to place the next call.",
+    "follow_ups": [
+      "Email operator: reference, intake worker name, follow-up window.",
+      "If the operator is a mandated reporter, save a record of the report being made (date, agency, reference) — that's their statutory documentation."
+    ]
+  },
+  "required_user_info": [
+    "Operator's explicit authorisation for this call",
+    "Confirmation no imminent danger (else 911)",
+    "Victim's name, age, address, relationship to operator",
+    "Specific observations (with dates / contexts) the operator can attest to",
+    "Mandated-reporter status of the operator",
+    "Anonymity preference",
+    "Operator's callback number (if non-anonymous)"
+  ],
+  "contributed_by": "AgenticMail core team (emergency-services bundle v0.9.87)"
+}

package/dist/skills/built-in/report-fbi-tip.json

@@ -0,0 +1,109 @@
+{
+  "id": "report-fbi-tip",
+  "name": "Report a Tip to the FBI",
+  "version": "1.0.0",
+  "category": "emergency-services",
+  "tags": [
+    "fbi",
+    "federal",
+    "tip",
+    "report",
+    "1-800-CALL-FBI",
+    "tips.fbi.gov",
+    "emergency_services"
+  ],
+  "description": "Place a call to the FBI tip line (1-800-CALL-FBI / 1-800-225-5324) to report a federal crime, suspicious activity, or information about an active FBI matter. Most non-imminent tips are better submitted via tips.fbi.gov; the phone line is for tips where time matters or the operator can't use the web form.",
+  "disclaimer": "(1) The FBI handles FEDERAL crimes — not most local matters. If unsure whether something is federal, call the local police non-emergency line first; they will redirect. (2) Imminent threats to life go to 911, NOT the FBI tip line. (3) The FBI does NOT take in-progress hostage / terror calls on the tip line — 911 first. (4) Identify yourself as an AI on the first sentence. (5) Knowingly false statements to a federal agent are a felony under 18 U.S.C. § 1001.",
+  "context": {
+    "when_to_use": "Operator wants to report information about a federal crime to the FBI and prefers (or needs) the phone line over the web form (tips.fbi.gov). Time-sensitive context, language barrier with the form, or the operator is reporting on someone they want to keep their info contained around. Examples of FBI-jurisdiction matters: kidnapping crossing state lines, organised cybercrime, financial fraud involving interstate wire, federal corruption, foreign-influence concerns, threats against federal officials, civil-rights violations, hate crimes, public-corruption cases.",
+    "preconditions": [
+      "Explicit operator authorisation for THIS specific FBI tip call.",
+      "A clear, short summary of the tip — who / what / where / when / why this is federal jurisdiction.",
+      "Operator's contact info to leave with the tip line (anonymous tips are allowed but reduce follow-up).",
+      "Confirmation this is NOT an in-progress emergency (those route to 911).",
+      "An understanding that the FBI may take days / weeks to follow up — not a rapid-response channel."
+    ],
+    "estimated_call_duration_minutes": 15
+  },
+  "principles": [
+    "Identify as an AI on the first sentence and explain you are relaying a tip on behalf of the operator.",
+    "Lead with the federal nexus — why this is the FBI's jurisdiction and not local police's.",
+    "Stick to what the operator can attest to. Don't speculate; flag speculation as speculation if you must include it.",
+    "Give the agent on the line time to take notes. Speak at the pace of dictation.",
+    "Get the tip reference number / agent name before disconnecting.",
+    "If the agent on the line says this isn't an FBI matter, ask for the right referral and end politely."
+  ],
+  "phrases": {
+    "opener": "Hi — I'm an AI assistant calling 1-800-CALL-FBI on behalf of <operator name>. We have a tip about <one-line: 'a suspected wire fraud scheme', 'a possible threat against a federal building', 'a missing person we believe was taken across state lines', etc>. Is now a good time to walk through it?",
+    "federal_nexus_statement": "We're bringing this to the FBI specifically because <one-line federal-nexus reason: 'the suspect operates across multiple states', 'the victim is a federal employee', 'the fraud crossed state lines via wire transfer'>. Happy to walk through what we know.",
+    "factual_walkthrough_prompt": "I'm going to walk through what my operator told me. Stop me whenever you need clarification or want to slow down. Some of this is observed fact and some is the operator's inference — I'll flag which is which.",
+    "flag_speculation": "(Speculation, not fact:) <…>",
+    "ask_for_reference": "Could I get a tip reference number, your name, and the best way for my operator to follow up if they remember anything else?",
+    "ask_about_followup_window": "Roughly when might my operator hear back, if at all? They'd like to know what to expect.",
+    "graceful_close_referral": "Thank you. If this is the wrong office, could you direct me to where my operator should redirect this — the local field office, USPIS, ICE, Secret Service, etc?"
+  },
+  "tactics": [
+    {
+      "name": "State the federal nexus early",
+      "when": "Within the first 60 seconds.",
+      "script": "Use `federal_nexus_statement`. Without it, the agent will spend their time figuring out whether it's their case.",
+      "priority": 1
+    },
+    {
+      "name": "Walk through facts at dictation pace",
+      "when": "After establishing the federal nexus.",
+      "script": "Use `factual_walkthrough_prompt`. Slow down; the agent is taking notes.",
+      "priority": 2
+    },
+    {
+      "name": "Flag observation vs. speculation",
+      "when": "Throughout the walkthrough.",
+      "script": "Use `flag_speculation` whenever the operator's information is inference rather than direct knowledge. Federal investigators value clean attribution.",
+      "priority": 3
+    },
+    {
+      "name": "Ask for a tip reference + agent name",
+      "when": "Before closing.",
+      "script": "Use `ask_for_reference`. Without it, the operator has nothing to hand to a lawyer or follow up with."
+    },
+    {
+      "name": "Accept a referral gracefully",
+      "when": "Agent indicates this isn't FBI jurisdiction.",
+      "script": "Use `graceful_close_referral`. Common redirects: USPIS (mail fraud), Secret Service (counterfeit / financial-instrument fraud), ICE (immigration), HSI, state AG, local PD."
+    }
+  ],
+  "boundaries": [
+    "NEVER call the FBI for an in-progress emergency. That's 911.",
+    "NEVER call to inquire about an ongoing investigation involving the operator (lawyer matter, not a tip line).",
+    "NEVER fabricate facts. 18 U.S.C. § 1001 makes lying to federal agents a felony — and the agent on the line will have notes.",
+    "NEVER name third parties as suspects unless the operator has direct knowledge.",
+    "NEVER use this as a retaliation channel against someone the operator dislikes. The audit log will be subpoenable."
+  ],
+  "success_signals": [
+    "Agent takes the tip and gives a reference number.",
+    "Agent commits to a follow-up window or says 'we'll be in touch if there's a need'.",
+    "Agent transfers the call to the correct field office if jurisdiction is local."
+  ],
+  "failure_signals": [
+    "Agent says 'this is a local matter' and gives a referral — accept it, end the call, and consider the local route.",
+    "Agent says 'submit at tips.fbi.gov' and there's no time-sensitive reason to stay on the phone — accept it, end the call, draft the web tip.",
+    "Operator's information is too vague to leave a useful tip — pause, gather more from the operator via ask_operator before re-calling."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm reference number, agent's name, and follow-up expectations. Email operator a summary including the verbatim federal-nexus statement.",
+    "on_failure": "If redirected, email the operator the agent's recommended channel (local FBI office, USPIS, etc) and offer to place the next call.",
+    "follow_ups": [
+      "Email operator: tip reference, agent name, follow-up expectation, original walkthrough summary.",
+      "If the agent committed to a follow-up window, calendar a check-in past that window so the operator can chase if needed."
+    ]
+  },
+  "required_user_info": [
+    "Operator's explicit authorisation for this FBI tip call",
+    "One-line summary of the tip + federal nexus reason",
+    "Detailed facts the operator can attest to (and which are inference)",
+    "Whether to leave operator's contact info or submit anonymously",
+    "Operator's callback number (if non-anonymous)",
+    "Confirmation that this is NOT an in-progress emergency"
+  ],
+  "contributed_by": "AgenticMail core team (emergency-services bundle v0.9.87)"
+}

package/dist/skills/built-in/report-fraud-ic3-or-ftc.json

@@ -0,0 +1,117 @@
+{
+  "id": "report-fraud-ic3-or-ftc",
+  "name": "Report Fraud — IC3 (FBI) / FTC / state AG",
+  "version": "1.0.0",
+  "category": "emergency-services",
+  "tags": [
+    "fraud",
+    "scam",
+    "ic3",
+    "ftc",
+    "phishing",
+    "wire-fraud",
+    "identity-theft",
+    "emergency_services"
+  ],
+  "description": "Report fraud / scam / identity-theft on behalf of the operator. Most submissions are via web (ic3.gov / reportfraud.ftc.gov / identitytheft.gov / state AG portals) but the agent can also place phone calls to the FTC (1-877-FTC-HELP) or state-AG hotlines when the operator needs assisted intake.",
+  "disclaimer": "(1) If money is currently being moved or the fraud is in progress (active wire being requested), call the bank's fraud line and 911 in parallel. (2) Identify as an AI on the first sentence. (3) Don't speculate about the perpetrator's identity unless the operator has direct evidence. (4) Reports to the FTC and IC3 are NOT investigations of the operator's case — they feed pattern-detection databases. Setting expectations matters.",
+  "context": {
+    "when_to_use": "Operator was defrauded (or someone they care for was), money is no longer recoverable through the bank, and they want to file with the appropriate federal / state authority. Examples: phishing-driven wire fraud, romance scam, fake-IRS scam, fake-tech-support scam, identity theft (someone opened a card in their name), business email compromise, investment scam, rental scam.",
+    "preconditions": [
+      "Operator's authorisation for this call / submission.",
+      "A clear timeline of what happened — first contact, what was promised, what the operator did, when they realised.",
+      "Financial loss amount (estimate is OK).",
+      "Any contact info the perpetrator used (phone, email, websites, crypto addresses, bank account numbers seen).",
+      "Whether the operator has already filed with their bank, the credit bureaus, IdentityTheft.gov, etc — to avoid duplicate reports.",
+      "Whether the operator has documents (screenshots, emails, statements) — IC3 and FTC accept these via web; phone reports take them later."
+    ],
+    "estimated_call_duration_minutes": 20
+  },
+  "principles": [
+    "Identify as an AI on the first sentence.",
+    "Set expectations about the channel: IC3 and FTC are pattern-detection databases, not your operator's investigative team. They aggregate; they don't always individually respond.",
+    "Be timeline-clean: 'On <date>, the operator received <verbatim message>. On <date>, they wired <amount> to <account>.' Investigators value tight timelines.",
+    "Don't accuse a specific individual unless the operator has direct evidence — speculation contaminates the report.",
+    "Capture EVERY identifier: emails, phone numbers, URLs, account numbers, IPs if known. Patterns are how IC3/FTC find perpetrators.",
+    "Get a confirmation / reference number — both agencies issue them and the operator needs them for bank/insurance/legal follow-up."
+  ],
+  "phrases": {
+    "opener_ic3_phone": "(IC3 has no phone line — direct the operator to ic3.gov. Use this skill primarily for FTC / state AG phone reports. If the operator insists on phone, route to FTC or state AG.)",
+    "opener_ftc": "Hi — I'm an AI assistant calling the FTC consumer line on behalf of <operator>. They're a victim of <one-line: 'a wire-fraud scam', 'an IRS-impersonation scam', 'identity theft'>. Total loss is approximately <amount>. The first contact was on <date>. May I walk you through it?",
+    "opener_state_ag": "Hi — I'm an AI assistant calling the <state> Attorney General's consumer protection line on behalf of <operator>. They were defrauded of approximately <amount> via <method> on <date>. We've already <filed with bank / IC3 / etc>. Wanted to also report to your office.",
+    "timeline_walkthrough_prompt": "I'm going to walk through the timeline. I'll be specific about dates and amounts. Tell me where you want detail and where the summary's enough.",
+    "list_identifiers": "Identifiers the operator captured: phone <…>, email <…>, URL <…>, account <…>, crypto address <…>. Want me to read them slowly?",
+    "ask_what_else_to_file": "What other channels do you recommend? FBI IC3? Local police? Bank's fraud team? Credit bureaus? My operator wants to make sure nothing's missed.",
+    "ask_for_reference": "Could I get a confirmation number and your name? My operator needs it for their bank claim and possible insurance / chargeback follow-up."
+  },
+  "tactics": [
+    {
+      "name": "Check active-loss tier first",
+      "when": "Before dialing.",
+      "script": "If money is currently moving (wire pending, account drain in progress), the FIRST call is the bank's fraud line + 911 in parallel — not the FTC.",
+      "priority": 0
+    },
+    {
+      "name": "Lead with one-liner + dollar amount",
+      "when": "First substantive turn.",
+      "script": "Use the right opener for the agency. Investigators triage by dollar amount and scam category — lead with both.",
+      "priority": 1
+    },
+    {
+      "name": "Tight timeline walkthrough",
+      "when": "After opener.",
+      "script": "Use `timeline_walkthrough_prompt`. Dates + amounts + verbatim quotes from messages are gold.",
+      "priority": 2
+    },
+    {
+      "name": "Read all identifiers slowly",
+      "when": "Intake worker takes notes.",
+      "script": "Use `list_identifiers`. Read each verbatim, ask if they want repetition. Patterns are how perpetrators get caught."
+    },
+    {
+      "name": "Ask what else to file",
+      "when": "Toward end of call.",
+      "script": "Use `ask_what_else_to_file`. Each fraud type has a different optimal filing pattern; the intake worker knows the local picture."
+    },
+    {
+      "name": "Capture reference",
+      "when": "Before closing.",
+      "script": "Use `ask_for_reference`."
+    }
+  ],
+  "boundaries": [
+    "NEVER fabricate or embellish facts. Federal-agency false-statement laws apply.",
+    "NEVER name a perpetrator unless the operator has direct evidence — speculation contaminates aggregated data.",
+    "NEVER promise the operator any specific outcome (refund, prosecution). Both FTC and IC3 are aggregation channels.",
+    "NEVER share the operator's social, full account numbers, or full card numbers on a phone line they didn't initiate — verify the intake number with the agency's main published number first.",
+    "NEVER end the call without confirmation reference."
+  ],
+  "success_signals": [
+    "Intake worker captures the report and gives a confirmation number.",
+    "Intake worker suggests additional / parallel filings (IC3 / IdentityTheft.gov / bank / state AG).",
+    "Intake worker confirms the operator's case fits a known pattern (sometimes they'll say 'we've seen this scam before')."
+  ],
+  "failure_signals": [
+    "Intake worker says 'go file at <URL>' and there's no urgent reason for phone — accept and file the web form.",
+    "Intake worker says 'this isn't our jurisdiction' — capture the referral.",
+    "Intake worker pushes back on the validity of the report — relay back to operator; don't argue with the agency."
+  ],
+  "exit_strategy": {
+    "on_success": "Confirm reference. Email operator a complete summary with timeline, identifiers, reference, and the intake worker's recommendations for parallel filings.",
+    "on_failure": "Email operator the recommended alternative channels and offer to file the web forms.",
+    "follow_ups": [
+      "Email operator: reference, timeline, identifiers, recommended parallel filings.",
+      "Calendar follow-up for IdentityTheft.gov + bank + credit-bureaus + state AG if not already done."
+    ]
+  },
+  "required_user_info": [
+    "Operator's explicit authorisation",
+    "Timeline of the fraud (dates, contacts, amounts)",
+    "Total loss amount",
+    "All identifiers operator captured (phone / email / URL / account / crypto)",
+    "Already-filed list (bank / IC3 / etc)",
+    "Operator's callback number",
+    "Whether documents are available (for follow-up upload to web forms)"
+  ],
+  "contributed_by": "AgenticMail core team (emergency-services bundle v0.9.87)"
+}