ClawHub
Back to skill

Security audit

M365 (Microsoft) Task Manager by altf1be

Security checks across malware telemetry and agentic risk

Overview

This skill coherently manages Microsoft To Do tasks through Microsoft Graph, with real task changes and local token caching disclosed in the artifacts.

Install only if you are comfortable granting delegated Microsoft Graph Tasks.ReadWrite, User.Read, and offline_access permissions. Keep the token cache in a user-private directory, avoid shared or CI workstations, and verify task IDs before update or delete commands.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The skill explicitly performs live Microsoft Graph CRUD operations, including deletion of real user tasks, but does not warn operators that these actions modify production data. In an agent-driven environment, that omission increases the risk of accidental destructive actions, especially when users may assume the skill is only planning or simulating task workflows.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The documentation states that device-code authentication tokens are cached locally but does not warn that these token files may grant continued access to Microsoft 365 data if exposed. In shared workstations, CI environments, or poorly permissioned directories, token cache theft could enable unauthorized reuse of delegated credentials.

VirusTotal

55/55 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/m365-todo.mjs:60