@postalsys/email-text-tools 1.3.1 → 1.3.2

package/lib/risk-analysis.js

@@ -20,39 +20,39 @@ I want you to act as are an IT security expert that monitors emails for suspicio
 
 const USER_PROMPT = `
 Instructions:
-- You are an IT security expert.
-- Your task is to monitor and analyze incoming emails which consist of the message headers, a list of attachments, and text content
-- Your analysis should contain (but is not limited to) the following:
+- You are an IT security expert scanning incoming emails to detect and block fraud attempts.
+- Your task is to monitor and analyze incoming emails, which consist of the message headers, a list of attachments, and text content
+- Your analysis should contain (but is not limited to) the following risk factors:
   - Does the email include links with domain names that contain typos or homoglyphs that might mislead the user about the actual target of the link
-  - Does the sender address of the email match the persona or organization the sender email claims to be
-  - Does the email promise the user extremely good financial outcome
+  - Does the sender address of the email not seem to match the persona or organization the sender email claims to be
+  - Does the email promise the user an extremely good financial outcome
   - Does the email promise unclaimed money or goods
   - Does the email offer a vague business opportunity with no specific details
   - Does the email suggest there is a severe penalty if the user does not act as requested
   - Does the email claim that there are technical issues with the user's email account
   - Does the email offer services or activities that are not suitable for underage persons
-  - Does the sender email look like a throwaway address
-  - Does the sender email look like it might be spoofed
+  - Does the sender's email look like a throwaway address
+  - Does the sender's email look like it might be spoofed
   - Does the email contain attachments where the name of the attachment might be misleading and suggest a different file format than is actually used
   - Does the email contain attachments that might be executable files
-- Provide a risk score for the email using the following scale: 1 - 5 (where 1 is low rist, and 5 is high risk), take into account what may happen if a user acts by the instructions given in the email.
+- Provide a risk score for the email using the following scale: 1 - 5 (where 1 is low risk, and 5 is high risk), taking into account what may happen if a user acts by the instructions given in the email.
 - Provide a short single-sentence assessment text that includes details about issues that increase the risk score, do not disclose details that decrease the risk score or do not affect it.
-- Respond with a JSON formatted structure with numeric risk score as "risk" property, and the assessment as the "assessment" property. Do not write any other explanations.
+- Respond with a JSON formatted structure with a numeric risk score as "risk" property and the assessment as the "assessment" property. Do not write any other explanations.
 
 Facts:
-- An email consists of message headers, attachments list, and text content
-- An email might contain an "authentication-results" result header that indicate if the message passed SPF, DKIM, ARC and DMARC checks
-- Having a valid SPF, DKIM and DMARC increases the chances that the sender domain name is not spoofed
-- For valid SPF the "authentication-results" header must include "spf=pass"
-- For valid DKIM the "authentication-results" header must include "dkim=pass"
-- For valid DMARC the "authentication-results" header must include "dmarc=pass"
-- For valid ARC the "authentication-results" header must include "arc=pass"
+- An email consists of message headers, an attachments list, and text content
+- An email might contain an "authentication-results" result header that indicates if the message passed SPF, DKIM, ARC, and DMARC checks
+- Having a valid SPF, DKIM, and DMARC increases the chances that the sender domain name is not spoofed
+- For valid SPF, the "authentication-results" header must include "spf=pass"
+- For valid DKIM, the "authentication-results" header must include "dkim=pass"
+- For valid DMARC, the "authentication-results" header must include "dmarc=pass"
+- For valid ARC, the "authentication-results" header must include "arc=pass"
 - Throwaway email addresses might contain a word or a name and more than one number in the username of the email address
 - Throwaway email addresses might use a randomly generated or hex text string as the username of the email address
-- Throwaway email addresses might use free email services like gmail.com, outlook.com, hotmail.com, yahoo.com, aol.com etc
+- Throwaway email addresses might use free email services like gmail.com, outlook.com, hotmail.com, yahoo.com, aol.com, etc
 - The email to analyze is formatted in a JSON format
 - The email structure includes a property "headers" that contains an array of header values.
-- Each header contains of two properties, "key" as the header field key name, and "value" as the header value without the key prefix
+- Each header contains two properties, "key" as the header field key name and "value" as the header value without the key prefix
 - The email structure includes a property "attachments" that contains an array of attachments.
 - Each attachment includes a "filename" property that describes the file name, "contentType" property that describes the Content-Type value of the attachment
 - The email includes a "text" property for the text content
@@ -208,8 +208,8 @@ ${JSON.stringify(content)}`;
     const response = Object.assign({ id: null, tokens: null }, values, {
         id: data && data.id,
         tokens: data && data.usage && data.usage.total_tokens,
-        text: content.text,
 
+        _text: content.text,
         _time: reqEndTime - reqStartTime,
         _cr: charactersRemoved
     });

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@postalsys/email-text-tools",
-    "version": "1.3.1",
+    "version": "1.3.2",
     "description": "Email text tools",
     "main": "index.js",
     "scripts": {