#security
- Triaging Gmail with Claude Subagents
A writeup of a small agentic system I built to triage my Gmail inbox, using Claude subagents to organize and assess messages.
- Currentonly Scopes in Google Apps Script
How Apps Script currentonly scopes limit access to an active file, and why Advanced Services, direct API calls, and openById need full scopes.
- Secure Secrets in Google Apps Script
Avoid hardcoded Apps Script secrets by using PropertiesService for configuration and Google Cloud Secret Manager for sensitive values.
- Protect Gmail AI Agents with Model Armor
Use Model Armor in an MCP tool handler to block prompt injection and redact sensitive Gmail content before it reaches an AI agent.
- Apps Script Service Account Impersonation
Avoid downloading service-account keys: use impersonation in Apps Script to mint access tokens for Google Cloud APIs.