[mdavidn]

If this can be exploited via a skill, then it can be exploited via untrusted input inserted into context. Does Cowork help with reading email?

[Shank]

> Does Cowork help with reading email?

Yes. It can read email.