You still have to trust your executive assistant. I would never give someone I don't trust the ability to read and write emails for me.

▲

mr_mitm 4 hours ago | parent [-]

If this takes off, I wonder if platforms will start providing API tokens scoped for assistants. They have permissions for non destructive actions like reading mails, flagging important mails, creating drafts, moving to trash, but not more.

	▲	eli 2 hours ago \| parent [-]
		How does my email platform know which messages I want my agent to see and which are too sensitive? I don't see how it's possible to securely give an agent access to your inbox unless it has zero ability to exfiltrate (not sending mail, not making any external network requests). Even then, you need to be careful with artifacts generated by the agent because a markdown file could transmit data when rendered.