mirror of
https://github.com/gnekt/My-Brain-Is-Full-Crew.git
synced 2026-08-26 02:04:43 +00:00
547fe06450
* Replace MCP Gmail/Calendar with Google Workspace CLI Swap all MCP tool references (gmail_*, gcal_*) for gws CLI equivalents in the postman agent and all 4 postman-related skills. Add Bash to postman tools for gws execution. Include setup guide for gws installation and OAuth configuration. Addresses review feedback: Food Coach and Wellness Guide references removed (those agents no longer exist on main). * Update skills/weekly-agenda/SKILL.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Address Copilot review feedback - Add gmail.send scope to setup guide and agent docs - Use narrower calendar scopes (calendar.events + calendarlist.readonly) - Make gcloud optional in prerequisites - Fix .mcp.json example to remove only Gmail/Calendar entries - Split label modify into separate add/remove examples - Replace hard-coded dates with placeholders - Fix after:{{yesterday}} to newer_than:2d for 48h filtering - Update all docs/gws-setup-guide.md paths to repo-relative - Add MCP fallback note for users without gws - Add mandatory user confirmation before mark-read/archive actions * Fix PR review findings: add security guardrails and update all MCP references for gws dual-support - Add Security: External Content section to postman.md to prevent command injection from untrusted email content - Update agents-registry.md, agents.md, CLAUDE.md, README.md to reflect gws CLI + MCP fallback duality - Update TERMS_OF_USE.md and DISCLAIMERS.md legal text to mention gws alongside MCP - Update onboarding skill to present gws as recommended option with MCP as fallback - Fix placeholder in gws-setup-guide.md (was a raw template, now a concrete date) - Update agent-template.md to document Bash for CLI tool access pattern * Harden security for email/calendar operations and update legal coverage - Postman agent: comprehensive security section covering prompt injection, shell injection, write operation safeguards, and Bash command allowlist - All 4 postman-related skills: add security sections with prompt injection defense, shell injection rules, and explicit MCP fallback instructions - TERMS_OF_USE.md: new Section 4A covering risks from email/calendar read and write operations (adversarial content, unintended sends, deletions, calendar disruptions), updated Limitation of Liability section - DISCLAIMERS.md: new section explaining write operation risks in plain language, MCP as safer read-only alternative, and acknowledgment of prompt-based security limitations --------- Co-authored-by: gnekt <dima9610@gmail.com>