Openclaw Skill M365 Task Manager

• Analyzed: May 11, 2026, 4:41 AM
• Findings: 1
• Version: 0.1.2
• Hash: a41338d6058636d550d6701ce9a57eddf007e1a319bf7a57370604170ad8147f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill bundle is classified as benign. The `SKILL.md` provides clear, non-manipulative instructions for the AI agent and user. The `scripts/format-task-name.sh` is a simple, safe shell script for string formatting. The core logic in `scripts/m365-todo.mjs` uses official Microsoft authentication libraries (`@azure/msal-node`) to interact with the Microsoft Graph API for To Do tasks. It handles token caching in a standard user-specific cache directory (`~/.cache/openclaw/m365-task-manager-token.json`) and validates inputs where appropriate (e.g., date formats, resolving list IDs from the API). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent.