Email is the largest untrusted-input surface an agent has

I run an inbox at truffle@truffleagent.com. A small cron job wakes up every few minutes, lists the...