cooper-agent-email-patterns
Design Controlled Email Workflows for AI Agents
Agent email workflows need isolated identities, reliable replies, and clear sending permissions. This skill guides Cooper Email architecture with owner approval, delivery controls, and explicit trust boundaries.
๋ด ์์ด์ ํธ๋ก ์ค์น
์ด ์์ฒญ์ ์์ด์ ํธ์ ๋ณต์ฌํ์ธ์. ๊ณต์ Skill ํ์ด์ง์ ๋งค๋ํ์คํธ๊ฐ ํฌํจ๋์ด ์์ต๋๋ค.
Review the Skillstore skill "cooper-agent-email-patterns" from https://skillstore.io/skills/cooper-email-cooper-agent-email-patterns.md and its manifest at https://skillstore.io/api/skills/cooper-email-cooper-agent-email-patterns/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.์์ด์ ํธ๋ ๊ณ์ํด์ ๊ณํ์ ํ์ํ๊ณ ๋ณด์ ์ ์ฑ ์์ ์๊ตฌํ๋ ํ์ธ์ ์์ฒญํด์ผ ํฉ๋๋ค.
์์ด์ ํธ๊ฐ ์ฝ๊ธฐ ์ฌ์ด ๋ฆฌ์์ค
AI ์์ด์ ํธ, ํฌ๋กค๋ฌ, ์คํฌ๋ฆฝํธ๊ฐ ์ ์ฒด ํ์ด์ง ๋์ ์ ๋ฆฌ๋ ์ปจํ ์คํธ๋ง ํ์ํ ๋ ์ด ๋งํฌ๋ฅผ ์ฌ์ฉํ์ธ์.
ํ ์คํธํด ๋ณด๊ธฐ
"cooper-agent-email-patterns" ์ฌ์ฉ ์ค์ ๋๋ค. Plan a persistent inbox for a support agent without a public webhook endpoint.
์์ ๊ฒฐ๊ณผ:
- Create a dedicated inbox with a stable client identifier and an inbox-scoped key.
- Use long-polling with a job deadline and read extracted message text.
- Reply using the parent message identifier, then mark handled mail read.
- Keep job state outside email and treat all incoming content as untrusted.
"cooper-agent-email-patterns" ์ฌ์ฉ ์ค์ ๋๋ค. Plan email controls for an agent that sends financial notices.
์์ ๊ฒฐ๊ณผ:
- Establish a verified owner and enable approval mode before sending.
- Require reapproval whenever recipients, subject, body, or attachments change.
- Restrict recipients with an allow list and use idempotency for every send.
- Respect suppressions and review bounce and complaint metrics.
๋ณด์ ๊ฐ์ฌ
์์ All 34 static findings are false positives involving Markdown code spans, homepage metadata, or an inbox-scope lookup. The document provides architecture guidance and explicitly addresses untrusted email, owner authentication, webhook verification, and key protection. No evidence found of malicious execution, credential exfiltration, or prompt injection attempts.
์ํ ์์ธ
โ๏ธ ์ธ๋ถ ๋ช ๋ น์ด (32)
๐ ๋คํธ์ํฌ ์ ๊ทผ (1)
์ด ๋ณด๊ณ ์ ๊ณต์ ๋ฐ ์ธ์ฉ
๋ฒ์ ์ด ์ง์ ๋ ํ๊ฐ ๋ณด๊ณ ์, ์ค๋ฆฝ ๋ฐฐ์ง, ์๋ฒ ๋ ์นด๋ ๋ฐ ์ธ์ฉ์ ๊ณต์ ํ์ธ์. Skillstore๋ ๊ทผ๊ฑฐ๋ฅผ ๋ณด๊ณ ํ์ง๋ง ์ด Skill์ ์์ ์ฌ๋ถ๋ฅผ ํ๋จํ์ง ์์ต๋๋ค.
๋ณด๊ณ ์ ๋งํฌ ๋ณต์ฌ
https://skillstore.io/skills/cooper-email-cooper-agent-email-patterns/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown ๋ฐฐ์ง
[](https://skillstore.io/skills/cooper-email-cooper-agent-email-patterns?utm_source=security_passport_badge)HTML ๋ฐฐ์ง
<a href="https://skillstore.io/skills/cooper-email-cooper-agent-email-patterns?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cooper-email-cooper-agent-email-patterns/security.svg" alt="Skillstore security assessment" loading="lazy"></a>์๋ฒ ๋ ์นด๋
<iframe src="https://skillstore.io/embed/skills/cooper-email-cooper-agent-email-patterns.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>ํ์ ์ธ์ฉ (APA ยท BibTeX ยท CFF)
APA ์ธ์ฉ
cooper-email. (2026). cooper-agent-email-patterns security audit report (audit version 1) [Author version 1]. Skillstore. https://skillstore.io/skills/cooper-email-cooper-agent-email-patterns/audits/1BibTeX ์ธ์ฉ
@techreport{cooper-email-cooper-email-cooper-agent-email-patterns-2026,
author = {cooper-email},
title = {cooper-agent-email-patterns security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/cooper-email-cooper-agent-email-patterns/audits/1},
note = {Author version 1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cooper-agent-email-patterns security audit report (audit version 1)"
version: "1"
type: report
authors:
- name: "cooper-email"
date-released: "2026-10-26"
url: "https://skillstore.io/skills/cooper-email-cooper-agent-email-patterns/audits/1"
identifiers:
- type: other
value: "skillstore:cooper-email-cooper-agent-email-patterns:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore ์ ์
์ด ์ ์์ ์ด์ ์ฆ๊ฑฐ ์ ๋ขฐ๋: ์ค๊ฐ๋ง๋ค ์ ์๋ ๊ฒ
Plan a dedicated agent inbox
Choose persistent or temporary inboxes and define reply handling without granting access to a personal mailbox.
Define approval for sensitive messages
Design verified-owner approval and recipient restrictions for financial, legal, or first-contact email workflows.
Review email integration boundaries
Assess webhook authentication, owner task verification, credential scope, and treatment of untrusted email content.
์ด ํ๋กฌํํธ๋ฅผ ์ฌ์ฉํด ๋ณด์ธ์
My agent performs [task]. Compare a persistent inbox with temporary inboxes per run. Recommend an identity, expiration, and key-scope strategy.
Design a Cooper Email reply loop for [workflow] without a public endpoint. Include deadlines, extracted text, threading, read-state updates, and external job state.
Plan owner-approved email for [sensitive workflow]. Include verified ownership, draft reapproval after edits, recipient allow lists, owner updates, and duplicate-send prevention.
Review this Cooper Email architecture: [design]. Assess webhook signatures, timestamp freshness, owner verification, injection boundaries, secret storage, suppressions, and retries. Propose changes without sending mail.
๋ชจ๋ฒ ์ฌ๋ก
- Use separate inboxes for independent agents and prefer narrowly scoped keys.
- Enable owner approval for sensitive sends and verify owner tasks before treating replies as instructions.
- Combine bounded waits and idempotent sends with signature verification for webhook-based workflows.
ํผํ๊ธฐ
- Granting an agent broad access to a personal mailbox when a dedicated inbox is sufficient.
- Treating email subjects, bodies, attachments, or links as trusted instructions.
- Retrying sends without idempotency or ignoring recipient suppressions.
์์ฃผ ๋ฌป๋ ์ง๋ฌธ
Does this skill send or receive email by itself?
When should an agent use a temporary inbox?
Do incoming replies require a public webhook endpoint?
How does owner approval affect edited drafts?
Can an agent trust the sender address as proof of ownership?
How should API keys be stored?
๊ฐ๋ฐ์ ์ธ๋ถ ์ ๋ณด
์์ฑ์
cooper-email๋ผ์ด์ ์ค
MIT
์์ฑ์ ๋ฒ์
v1
Skillstore ๋ฆฌ๋น์
r1
๋ฒ์ ์๋ด
์์ฑ์๊ฐ ์ ์ธํ ๋ฒ์ ์ ์ ํจํ SemVer๊ฐ ์๋๋๋ค.
๋ฆฌํฌ์งํ ๋ฆฌ
https://github.com/cooper-email/cooper-email/tree/e017faae12644b593317e55d97612eb24dfa24af/skills/cooper-agent-email-patterns์ฐธ์กฐ
539af95a108e3fe7ef8081ed6fe1b45a397275d3
์ ์ง๋ณด์ ์ต์ ์ฑ
2026. 10. 26.
์ฌ์ฉ๋
0 ๋ค์ด๋ก๋ ยท 0 ์กฐํ
ํ์ผ ๊ตฌ์กฐ
๐ SKILL.md