{
  "format": "zambo.workflow-recipe",
  "version": "1.0.0",
  "updated_at": "2026-11-08",
  "title": "Check a suspicious message before acting on it",
  "slug": "safe-paste-check",
  "purpose": "Someone receives a strange email, link, or wallet request and wants to inspect it before clicking or replying.",
  "audience": "Everyone",
  "status": "illustrative_not_executed",
  "validated_against": {
    "live_catalog": "https://zambo.dev/mcp?full=true",
    "checked_at": "2026-11-08"
  },
  "mapping_legend": {
    "$from_user": "Use the named user input; ask instead of guessing.",
    "$from_step": "Read a dotted field path from that earlier step's observed JSON result.",
    "$from_current_job": "Use the current connected job/session value.",
    "$from_each_item": "Use one item from the named user list for a step marked repeat_only_for; preserve the results in iteration order."
  },
  "client_compatibility": {
    "protocol": "MCP Streamable HTTP",
    "endpoint": "https://zambo.dev/mcp",
    "tested_clients": [],
    "note": "Not executed in a connected AI client. Client-specific compatibility is unverified."
  },
  "user_inputs": [
    "message_text",
    "raw_email_headers_if_available",
    "optional_link_or_wallet",
    "why_it_matters",
    "redacted_summary"
  ],
  "input_guidance": "Inputs referenced by conditional steps are only needed when those steps apply. Ask the user before optional memory, journal, sharing, or public-repository actions.",
  "steps": [
    {
      "id": "shield",
      "tool": "prompt_shield",
      "action": "Scan the supplied message for prompt-injection and manipulation patterns.",
      "arguments_template": {
        "prompt": {
          "$from_user": "message_text"
        },
        "context": {
          "$from_user": "why_it_matters"
        },
        "mode": "fast"
      },
      "authorization": {
        "mcp_access": "Public MCP endpoint; a specific tool may have separate limits or require user confirmation.",
        "user_approval": "Required before any write, sharing, payment, or external action.",
        "secrets": "Never include provider keys, passwords, or other secrets."
      },
      "expected_output": "The scan's findings and cautions for the supplied text.",
      "stop_and_resume": "Stop on an error, missing permission, unexpected output, or unavailable tool. Do not claim success. Resume only from the last confirmed step using its actual returned values."
    },
    {
      "id": "email",
      "tool": "email_verify",
      "action": "Check sender authentication only when the user has the original email headers.",
      "arguments_template": {
        "headers": {
          "$from_user": "raw_email_headers_if_available"
        }
      },
      "authorization": {
        "mcp_access": "Public MCP endpoint; a specific tool may have separate limits or require user confirmation.",
        "user_approval": "Required before any write, sharing, payment, or external action.",
        "secrets": "Never include provider keys, passwords, or other secrets."
      },
      "expected_output": "Sender-domain signals such as SPF, DKIM, and DMARC; this does not establish the truth of the email's claims.",
      "run_only_when": "Only when original raw headers are available; remove unrelated personal data first.",
      "stop_and_resume": "Stop on an error, missing permission, unexpected output, or unavailable tool. Do not claim success. Resume only from the last confirmed step using its actual returned values."
    },
    {
      "id": "scam",
      "tool": "scam_check",
      "action": "Check an embedded URL, wallet, or domain if the user supplied one.",
      "arguments_template": {
        "text": {
          "$from_user": "message_text"
        },
        "target": {
          "$from_user": "optional_link_or_wallet"
        }
      },
      "authorization": {
        "mcp_access": "Public MCP endpoint; a specific tool may have separate limits or require user confirmation.",
        "user_approval": "Required before any write, sharing, payment, or external action.",
        "secrets": "Never include provider keys, passwords, or other secrets."
      },
      "expected_output": "Threat-intelligence signals for the exact supplied content or target.",
      "run_only_when": "Only if the message contains a URL, wallet, or domain the user wants checked.",
      "stop_and_resume": "Stop on an error, missing permission, unexpected output, or unavailable tool. Do not claim success. Resume only from the last confirmed step using its actual returned values."
    },
    {
      "id": "log",
      "tool": "journal_log",
      "action": "Optionally record a redacted summary after the user asks.",
      "arguments_template": {
        "job_id": {
          "$from_current_job": "session_id"
        },
        "executor_identity": "user-approved safety review",
        "action": "reviewed supplied content",
        "metadata": {
          "$from_user": "redacted_summary"
        }
      },
      "authorization": {
        "mcp_access": "Public MCP endpoint; a specific tool may have separate limits or require user confirmation.",
        "user_approval": "Required before any write, sharing, payment, or external action.",
        "secrets": "Never include provider keys, passwords, or other secrets."
      },
      "expected_output": "A receipt for the reported review; do not store the original message.",
      "run_only_when": "Only if the user asks to record the review and approves the redacted summary.",
      "stop_and_resume": "Stop on an error, missing permission, unexpected output, or unavailable tool. Do not claim success. Resume only from the last confirmed step using its actual returned values."
    }
  ],
  "safety": {
    "no_payment_or_external_action": true,
    "privacy": "Use only owner-approved, client-safe inputs. Public receipts may expose call details; keep sensitive data out.",
    "receipt_scope": "Receipts record Zambo-observed calls. They do not prove answer correctness, participant identity, or an outside outcome."
  },
  "pricing": [
    "Free access: 20 metered calls per UTC day, shared across tools, plus one free wrap-up handover each day.",
    "Day Pass: $0.99 for 24 hours, one payment.",
    "Zambo Pass: $29 for 30 days, one payment.",
    "Lifetime: $250 one payment while Zambo operates. It includes current Level 2 features, not future features or third-party provider costs.",
    "No subscription or automatic renewal. A pass does not pay for third-party AI plans or external services."
  ]
}