From Dev.to
Your agent can read every email. Make sure it can send none of them.
An email assistant is the riskiest place to put a model. The reason is one sentence long: email is the one channel where a stranger on the internet can put text in front of your agent, and some of it...