CtrlK
BlogDocsLog inGet started
Tessl Logo

morning-briefing

Generates a morning briefing that triages your inbox and previews your day using the Superhuman Mail MCP server — acting as an AI chief of staff. Use this skill whenever someone asks to "brief me on my day", "triage my inbox", "what's important in my email", "summarize my unread emails", "what do I need to deal with today", "chief of staff briefing", "morning update", "inbox summary", "what emails need my attention", "clear my inbox", or any variation of wanting a prioritized view of their email and calendar before they start working. Also trigger when someone says "I just woke up, what's going on" or "catch me up on my inbox". Trigger broadly — if someone wants to understand the state of their inbox or day at a glance, this skill should activate.

80

Quality

100%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

The canonical home for this skill is morning-briefing in superhuman/mcp-mail

SKILL.md
Quality
Evals
Security

Low

Low-risk findings.

1 low severity finding. Worth noting, but not necessarily harmful.

Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

The required workflow uses the Superhuman Mail MCP server to read the user’s inbox and calendar (e.g., `Superhuman_Mail.list_threads`, `query_email_and_calendar`), which necessarily ingests message bodies/subjects authored by third parties (email senders/attendees) as free text into the agent’s LLM context.

Report incorrect finding
Repository
openai/plugins
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.