Nylas Email, Calendar & Contacts

Email, calendar & contacts via Nylas API — 14 typed tools across Gmail, Outlook, Exchange, Yahoo, iCloud, and IMAP.

This skill appears to do what it says: it needs your NYLAS_API_KEY so the plugin can access your email, calendar, and contacts. Before installing or letting an agent run the commands: 1) Verify the npm/OpenClaw plugin (@nylas/openclaw-nylas-plugin) publisher and review its package/homepage source (the registry metadata here shows no homepage). 2) Limit the API key's scope if possible and use a dedicated key/account for integrations; rotate/revoke it if you stop using the plugin. 3) Be aware the SKILL.md tells you to install a third-party package — that fetches code from a registry, which can run arbitrary code during install. If you are unsure, inspect the package code or install it manually rather than allowing an automated agent to do it. 4) If you do not want the agent to perform installs or change config autonomously, do not grant it permission to execute system commands or install plugins.

Type: OpenClaw Skill Name: nylas-email-calendar Version: 1.0.0 The skill bundle provides a legitimate integration for the Nylas API to manage emails, calendars, and contacts. The tools defined in SKILL.md (e.g., nylas_send_message, nylas_list_events) and the setup instructions are consistent with the stated purpose, and no indicators of malicious intent, data exfiltration, or prompt injection were found.