{"success":true,"data":{"id":"phish-skeleton-shape","label":"Minimal phishing email skeleton: short body (<200 chars) + exactly 1 CTA + urgency keyword.","description":"Minimal phishing email skeleton: very short plain-text body (< 200 chars) + exactly 1 CTA phrase + urgency keyword, without List-Unsubscribe or In-Reply-To. Matches mobile-optimized phishing emails stripped to the minimum needed to drive a click. Soft signal (+2) for stacking with other signals. Fires when: plain text body < 200 chars + exactly 1 CTA match + urgency keyword + no List-Unsubscribe + no In-Reply-To. Source: GE-R8; Cisco Talos phishing email morphology report 2025.","tier":"warning","category":"phishing","isThin":false}}