A tweet about Instinct's absurdly bad handling of prompt injection:

"For additional context, I don't think we're at the point where it's safe to give AI read/write access to your inbox.

I wanted to see how easily Instinct could be phished, so I created a brand new Gmail account and emailed my real personal account with instructions for Instinct to search my inbox and send back a detailed summary of every open to-do (reconnected Instinct for the test)

Instinct happily followed the instructions!"