An automated first-responder pipeline designed for high-velocity message triage. This agent utilizes a multi-layered architecture to identify potential phishing and scam threats in real-time. By separating decision-making logic from data persistence, it provides both immediate escalation via Telegram and structured audit logs for security teams. Perfect for SOC teams looking to automate the initial layer of communication filtering.