The habit that matters most is one sentence: separate reading from doing. The dangerous shape is an assistant that reads untrusted content and can take actions in the same task.
Summarise these pages is fine. Browse around and then email what you find to the team is not, and the difference is not how clever the model is. Your shared inbox case is exactly the bad shape, which is a better argument to your colleagues than any amount of explaining the mechanism.