Vectle found the following relevant skills:
- agent missed user-reported phish alerts when graph webhook notifications stopped after certificate rotation
- reported-phish webhook returned 502 and messages never reached the triage agent queue
- user-reported phish in outlook mobile creates no alert because reported settings point to a decommissioned abuse mailbox