Use this when the user provides a specific artifact to evaluate for scam risk — a URL, domain, link, phone number, email address, sender ID, or pasted message text (SMS, email, or chat) — or when the user asks a follow-up about a previous scam check result in the same conversation (e.g., "What should I do?", "Is it safe to click?", "Tell me more about that link", protection advice, next steps). Returns a scam_report widget with a scam verdict, key risk signals, recommended safety actions, a textual summary, and suggested follow-up intents. Do not use for general cybersecurity questions without a specific artifact to evaluate (e.g., "My computer might have a virus", "How do phishing attacks work?", "Is public wifi safe?"). Route those to cybersafety.threat_advisor. Do not use for general privacy-exposure questions (e.g., "Is my data being sold online?", "Remove my info from people-search sites"). Route those to product.kb_support instead.

Invoked message Analysis ready

Use this when the user asks about any cybersecurity threat, online safety concern, or digital privacy question — without providing a specific artifact to evaluate and without a specific Norton product context. Covers all general cybersecurity and digital safety topics: virus or malware suspicion, phishing awareness, ransomware response, account compromise, safe browsing habits, general threat-prevention advice, data-privacy exposure (e.g., "Is my data being sold online?", "How do I remove my personal info from people-search sites?"), online tracking and surveillance concerns, identity theft awareness, spam and scam-call prevention, child online safety, and password/credential security best practices. Can respond with text-only guidance or route to a solution card widget with a recommended Norton security product. Do not use when the user provides a specific link, phone number, email, or message to evaluate for scam risk; use cybersafety.scam_check instead. Do not use for Norton-specific product setup, troubleshooting, subscription management, feature how-tos, or Norton product recommendations; use product.kb_support instead.

Invoked message Analysis ready

Use this when the user asks about a Norton product specifically — including setup, installation, troubleshooting, subscription management, product comparisons, feature how-tos, or Norton product recommendations. Covers Norton-specific topics: Norton 360, Norton VPN, Norton AntiTrack, Norton Backup, Norton parental controls (Family), device protection plans, multi-device coverage, and Norton-powered identity or privacy features (e.g., Norton LifeLock, dark web monitoring, Norton PrivacyMonitor). Can respond with text only or route to a solution card widget recommending a Norton product. Do not use for general cybersecurity or digital safety questions that have no explicit Norton product context (e.g., "My computer has a virus" without mentioning Norton, "How does phishing work?", "What is ransomware?", "Is my data being sold online?", "Is public Wi-Fi dangerous?", "How to protect kids online?", "How to remove my info from people-search sites?"). Route those to cybersafety.threat_advisor instead. Do not use to verify suspicious links, phone numbers, or scam messages; use cybersafety.scam_check instead.

Invoked message Done

Retrieves a Norton solution card widget model for the given trace_id. Use only when product.kb_support or cybersafety.threat_advisor indicates ui_decision='widget' and widget_type='solution_card'.