Nylas Email, Calendar & Contacts

Access and manage email, calendar, and contacts across multiple providers using the Nylas API for unified communication and scheduling tasks.

This skill appears to do what it says, but before installing: 1) Verify the npm package page, publisher, and version of @nylas/openclaw-nylas-plugin on npm (confirm the maintainer is Nylas or a trusted org). 2) Use the least-privilege Nylas API key or a grant scoped to the accounts you want the plugin to access; consider creating a dedicated key for the plugin and rotate it if needed. 3) Be aware that granting the NYLAS_API_KEY gives the plugin (and any installed code it pulls) access to your emails, calendars, and contacts — treat it like a sensitive credential. 4) Note the minor metadata inconsistency: the evaluator manifest said “no install spec,” while the SKILL.md includes an npm install entry; confirm how the OpenClaw runtime will fetch the plugin and inspect the package if you want higher assurance. If any of these checks fail or the npm package publisher looks unfamiliar, do not install.

Type: OpenClaw Skill Name: nylas Version: 1.0.1 The skill bundle provides a legitimate integration with the Nylas API for managing email, calendar, and contacts. It uses standard npm installation procedures for the '@nylas/openclaw-nylas-plugin' package and requires a user-provided API key. No malicious patterns, obfuscation, or prompt injection attacks were identified in SKILL.md or _meta.json.