Skip to content

Security: KiriSchrieffer/email-summary-agent

Security

SECURITY.md

Security Notes

This project is designed as a local, read-only email summarization pipeline.

Do Not Commit

  • config.yaml
  • .env files
  • generated files in outputs/
  • real .eml files containing personal email
  • packaged builds in dist/

Use config.example.yaml as the public template and keep real account settings local.

Email Credentials

Do not store email passwords or app passwords in the repository. Set the password through the environment variable named by email.password_env_var.

PowerShell example:

$env:EMAIL_APP_PASSWORD = "your-app-password"

If an app password is ever pasted into chat, logs, screenshots, or a committed file, revoke it and generate a new one.

Mailbox Permissions

The IMAP reader must remain read-only. It should only login, select the mailbox in read-only mode, search, fetch, and logout.

There aren't any published security advisories