AI Email Assistant
An email-handling application integrated with an LLM that can read the inbox and summarize or act on emails according to user requests. It typically holds read and send tool permissions, making it a typical attack surface for indirect prompt injection.
Timeline (last 90 days)
Fully automated reply sending carries a risk of misjudgment; it is recommended to initially adopt a semi-automatic mode of 'generate draft, human confirm,' and gradually open up full automation once the process stabilizes.
Emails involving sensitive information or important customers should have filtering rules set up to avoid accidental triggering.
All Facts (2)
Fully automated reply sending carries a risk of misjudgment; it is recommended to initially adopt a semi-automatic mode of 'generate draft, human confirm,' and gradually open up full automation once the process stabilizes.
50%UnverifiedEmails involving sensitive information or important customers should have filtering rules set up to avoid accidental triggering.
50%