Cunning Action. On each of its turns, the spy can use a bonus action to take the Dash, Disengage, or Hide action.
Sneak Attack (1/Turn). The spy deals an extra 7 (2d6) damage when it hits a target with a weapon attack and has advantage on the attack roll, or when the target is within 5 feet of an ally of the spy that isn't incapacitated and the spy doesn't have disadvantage on the attack roll.
Multiattack. The spy makes two melee attacks.
Shortsword. Melee Weapon Attack: +4 to hit, reach 5 ft., one target. Hit:5 (1d6 + 2) piercing damage.
Hand Crossbow. Ranged Weapon Attack: +4 to hit, range 30/120 ft., one target. Hit:5 (1d6 + 2) piercing damage.
Curse (Recharges After a Long Rest). The Vistana targets one creature that it can see within 30 feet of it. The target must succeed on a DC <$spell_dc__cha$> Wisdom saving throw or be cursed. The Vistana chooses the curse's effect from the options that follow; other Vistani curses are possible. All such effects deal psychic damage to the Vistani who uttered them when they end:
The curse lasts until ended with a greater restoration spell, a remove curse spell, or similar magic. It doesn't end when the target dies. If a cursed target is returned to life, the curse remains in effect.
Evil Eye (Recharges after a Short or Long Rest). As an action, a Vistana can target a creature within 10 feet that the Vistana can see. This magical ability, which the Vistani call the Evil Eye, duplicates the duration and effect of the animal friendship, charm person, or hold person spell (Vistana's choice; spell DC <$spell_dc__cha$>), but requires neither somatic nor material components. If the target succeeds on the save, the Vistana is blinded until the end of the Vistana's next turn.
A Vistana who uses Evil Eye can't use it again before finishing a short or long rest. Once a target succeeds on a saving throw against a Vistana's Evil Eye, it is immune to the Evil Eye of all Vistani for 24 hours.