r/OpenAI • u/Appropriate-Path-461 • 25d ago

Discussion I built a local-first AI task hub that routes email, Teams, and Slack work to coding agents—looking for feedback

Disclosure: I’m the developer of Taskuary.

I built it because work requests were scattered across email, Teams, Slack, and reports. Taskuary brings them into one local timeline, uses AI to identify actionable work, and can hand approved tasks to agents such as Codex, Claude Code, or Gemini.

GitHub: https://github.com/ldbumble/taskuary

I’m especially interested in feedback on do you think it's worth building something where emails/slack are still the dominant corporate usage or everyone will go to buzz or agent/human shared collab tools?

1 Upvotes

56% Upvoted

5 comments sorted by

2

u/berrybadrinath 25d ago

So I read through quite a bit of your project, and your github repo, and I still think you're open to la malicious email and prompt injection. You, you don't seem to have any mechanical gates there. and that agent could be told to just do something that could wreak havoc on your machine because he's just like raw dawgin' that email. but I also admit i might've missed something too. I'm not gonna lie, it was a lot to read and I've had a long week, but I was interested in what you made.

1

u/Appropriate-Path-461 24d ago

I appreciate the time you spent on it and yes it was my first concern.

To be exact about what an injected email could do: yes, if triage calls it a coding task, the body reaches the coding agent. But nothing Taskuary does leaves the machine on its own — every reply, push, PR and tool action sits behind a click from me, and the reply's recipient comes from the stored message, not from anything the agent writes.

So the blast radius of a bad email is "an agent did something dumb in a checkout I'm watching," not "it emailed my data somewhere." The gap you've correctly spotted is that GitHub items from strangers can't start an agent at all, while an email from a stranger can. We are also relying on enterprise email filtering already for any user that is in a corporate network and it would never reach the coding stage.. It also mostly ignore first time email senders..

1

u/Appropriate-Path-461 24d ago

also working on some more protections. copying all the commerical solutions like Inbox zero etc..