skills/drolu/agent-skills/nylas/Socket

nylas

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally consistent and uses official Nylas distribution, so it is not malware-like, but it grants an agent high-impact access to mailbox/calendar data and routes sensitive credentials and content through Nylas infrastructure. The main risk is credential forwarding plus autonomous external actions, not deceptive installation or hidden behavior.

Confidence: 89%Severity: 64%

Audit Metadata

Analyzed At

Jul 2, 2026, 07:12 PM

Package URL

pkg:socket/skills-sh/DrOlu%2Fagent-skills%2Fnylas%2F@d7ad2ad7432da640e13242edbb6e0967ee9387af3967ecbb145425f60acdaf96