At the moment there doesn't seem to be any drawbacks to spamming Examine on one or more people to try and pierce a disguise. I suggest some changes be made to balance things vs the disguise skill better, and to reflect the fact that Examine should be careful examination of a person rather than quick looks.
Some ideas:
- Longer cooldowns, perhaps x times per day
- Broadcast, either publicly or privately to the other player, that the Spotter is watching and closely examining x person.
- Penalties to spot, or other vulnerabilities.
To clarify the last one, if a person is spamming or otherwise focusing on Examining certain people, it makes sense that they should be less able to notice other things around them. They should be easier to ambush from behind, for example, or less likely to notice what is happening around them.