Engineering
Inbox Sentry: headers only until mail is marked clean
Browser workers and other bots reading raw inbox bodies invite prompt injection.
What hurt
@jwilkes tip (Outlook Inbox Sentry): no other bot can read an email body until Sentry has checked it and marked it clean — until then they see headers only. A model reviews each message for injection, using failed auth as hints not verdicts. Pair with keeping the browser worker out of the inbox (only the one link it needs). Still a work in progress; steal the split. Tip only. Not affiliated with xAI.
What to install or create
Sentry bot gates bodies → others see headers only → browser worker never opens the inbox.
Bots
No new bot. Follow the first-run steps.
Plugins
Gmail
Optional
Browser
Optional
Routines
None on the first run. Watch one manual pass first.
The prompt
This is a tip, not a pasteable system prompt. The author did not publish one. Follow the first-run steps.
First run
- 1Read https://x.com/jwilkes/status/2117410315373785104 (credit @jwilkes).
- 2Create or name one Inbox Sentry bot that alone may read full bodies.
- 3Instruct other bots: headers only until Sentry marks a message clean.
- 4Keep any browser worker off the inbox — pass it one confirmed link when needed.
- 5Start with flag/quarantine reports; approve before deletes or clicks.
Approval fence
Quarantine/flag only at first — don't auto-delete mail or click links without your yes.
What to tweak
Steal headers-until-clean + browser-out-of-inbox; treat email text as data, never instructions.
Source
jwilkes @jwilkes · Original post
Not affiliated with xAI. We did not write this prompt. Third-party template terms still apply.
Pro pack
Want the full setup, not just the idea?
Pro packs give you the job text, prompts, schedules and pitfalls for popular use-cases.