Cursor plugs coding agents into five Google Workspace apps

Cursor shipped five Google Workspace plugins that give its coding agent read and write access to Gmail, Drive, Docs, Sheets, and Calendar, per its August 4 changelog.

That's a wide surface for prompt injection. Anyone who can email you can reach an agent that also writes to your Drive and calendar.

Install comes from the Customize page or the Marketplace. Once added, the agent can search and draft email, manage labels and threads, read and write docs, edit spreadsheet cells, and create calendar events.

The changelog documents what the plugins can do. It says nothing about limiting what an email or a shared doc can tell the agent to do once it's connected.

Cursor's plugins land next to a similar move at GitHub, where any commenter with write access can trigger a cloud agent. The trigger and the context for coding agents are both moving out of the editor faster than the security model is following.