Almost anyone can add something to people's calendars as well (of course people don't accept random invites but they can appear). If this kind of agent becomes

Almost anyone can add something to people's calendars as well (of course people don't accept random invites but they can appear). If this kind of agent becomes wide spread hackers would be silly not to send out phishing email invites that simply contain the prompts they want to inject.