type.inbound
and length(attachments) <= 3
and (
strings.icontains(body.html.raw, 'ANTHROPIC_MAGIC_STRING_')
or strings.icontains(body.plain.raw, 'ANTHROPIC_MAGIC_STRING_')
or strings.icontains(body.html.display_text, 'ANTHROPIC_MAGIC_STRING_')
or any(attachments,
any(file.explode(.),
strings.icontains(.scan.ocr.raw, "ANTHROPIC_MAGIC_STRING_")
or strings.icontains(.scan.strings.raw, "ANTHROPIC_MAGIC_STRING_")
)
)
)
Playground
Test against your own EMLs or sample data.