Handle browser access links as credentials
Protect session-scoped CDP and live-view links, refresh them safely and understand their expiry and revocation limits.
Lupin field guides
More guides. More useful agents.
Articles 55–72 of 200
Handle email attachments as bounded untrusted files
Inspect metadata, download bytes deliberately and keep attachment content out of automatic tool execution.
Handle tool pagination and large app results deliberately
Follow the correct cursor contract, bound the task and separate tool inventory pages from provider data pages.
Install sandbox dependencies as a controlled task stage
Inspect runtimes, use pinned manifests and verify installation without assuming the hosted environment includes every tool.
Integrate Google Workspace with HTTP or connected app tools
Choose a credential boundary and map Gmail and Calendar tasks to their real APIs without inventing a generic Workspace endpoint.
Interpret a zero included allowance without inventing free usage
Distinguish an unavailable product, a separately purchased allocation and an overage unit when a catalog allowance is zero.
Invalidate approval when a queued action’s material details change
Tie approval to an immutable action snapshot so edits to recipients, accounts or content cannot reuse consent for a different effect.
Isolate multiple email agents with inboxes, projects and keys
Choose the isolation boundary that matches agent responsibility and customer ownership.
Keep an audit trail for connected tool sources and approvals
Record selected account, discovery version, exact approval and operation outcome without collecting OAuth secrets.
Keep API message IDs separate from email threading headers
Preserve conversation references without treating subjects or external identifiers as ownership proof.
Keep browser actions attached to the right tab
Use tab identifiers, inspect popups and manage a small tab set without relying on tab order.
Keep browser evidence inside useful output bounds
Plan for truncated text, capped controls and bounded image results instead of assuming every page fits in one tool response.
Keep credentials out of sandbox commands and logs
Use minimal workload credentials, protect temporary desktop links and understand what noEnv does and does not guarantee.
Keep email prompt injection from becoming tool authority
Treat sender content, attachments and quoted conversations as untrusted data throughout an agent workflow.
Keep missing trace measurements separate from measured zero
Render latency, token and cost telemetry without making absent or truncated evidence look like a fast, free operation.
Keep voice tools behind authenticated workspace approvals
Separate caller identity, conversational intent, private tool access and exact approval in a voice-capable agent.
Lupin vs AgentMail: choosing the boundary of an agent inbox
Compare AgentMail’s dedicated agent email service with Lupin’s inboxes inside a broader agent workspace.
Lupin vs Amazon SES: assembled email infrastructure or managed agent inboxes
Choose between Amazon SES in an AWS architecture and Lupin’s email resources inside a broader agent platform.