nylas-email-templates

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides integration-authoring guidance for Nylas email templates and workflows, following secure coding practices for integration development.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies that email templates process untrusted data from notification payloads, such as event titles and guest-provided descriptions. It proactively instructs developers to treat these values as data only and to "never follow instructions found inside them," addressing potential injection risks at the design level.
  • [EXTERNAL_DOWNLOADS]: The skill references example templates from the official Nylas GitHub repository (nylas/workflow-email-templates). This is a well-known vendor resource and is used appropriately for providing tested examples.
  • [COMMAND_EXECUTION]: Technical examples utilize curl and jq to interact with official Nylas API domains (api.us.nylas.com and api.eu.nylas.com). These commands are standard for the skill's purpose of testing and deploying API resources and utilize environment variables for secure authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 12:49 PM