SharePoint by altf1be

• Outcome: Pass
• Latest audit: May 28, 2026 · 7:40 AM UTC
• Version: 2.0.0

Overview

This is a disclosed SharePoint integration, but it should be installed only with tightly scoped Microsoft Graph permissions.

Install only if you want OpenClaw to access the configured SharePoint site. Use a dedicated Entra app with Sites.Selected, grant the minimum site-level permission needed, protect the certificate and optional password, install with the lockfile, and require human review for upload, delete, checkout, checkin, edit, and organization edit-link creation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (14)

Description-Behavior Mismatch

Medium

• Confidence: 95% confidence
• Finding: The implemented CLI exposes destructive and permission-affecting capabilities such as delete, checkout/checkin, edit, and organization-wide edit-link creation, while the published skill description emphasizes 'secure SharePoint file operations' and document intelligence without clearly disclosing those actions. This mismatch can cause users or orchestrators to grant trust or invoke the skill under incomplete assumptions, increasing the risk of unintended destructive or sharing operations.

Context-Inappropriate Capability

High

• Confidence: 98% confidence
• Finding: The `edit-link` command creates an organization-scoped edit link for any resolved file, which expands access beyond simple file operations into intra-organization sharing. In a skill presented primarily as secure SharePoint file operations and document intelligence, this is a materially more dangerous capability because it can enable broad unauthorized modification if invoked on sensitive documents.

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The README advertises broad natural-language triggers such as 'Read the meeting notes from today' and 'Upload this report to SharePoint' without clear scoping or confirmation requirements. In an agent setting, these phrases can overlap with ordinary user requests and may cause the skill to activate on ambiguous prompts, increasing the risk of unintended access to SharePoint data or unintended write operations.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"url": "https://github.com/ALT-F1-OpenClaw/openclaw-skill-sharepoint.git"
  },
  "dependencies": {
    "@azure/identity": "^4.0.0",
    "@microsoft/microsoft-graph-client": "^3.0.0",
    "commander": "^12.0.0",
    "dotenv": "^16.0.0",

• Confidence: 93% confidence
• Finding: "@azure/identity": "^4.0.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

},
  "dependencies": {
    "@azure/identity": "^4.0.0",
    "@microsoft/microsoft-graph-client": "^3.0.0",
    "commander": "^12.0.0",
    "dotenv": "^16.0.0",
    "exceljs": "^4.4.0",

• Confidence: 93% confidence
• Finding: "@microsoft/microsoft-graph-client": "^3.0.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"dependencies": {
    "@azure/identity": "^4.0.0",
    "@microsoft/microsoft-graph-client": "^3.0.0",
    "commander": "^12.0.0",
    "dotenv": "^16.0.0",
    "exceljs": "^4.4.0",
    "jszip": "^3.10.1",

• Confidence: 92% confidence
• Finding: "commander": "^12.0.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"@azure/identity": "^4.0.0",
    "@microsoft/microsoft-graph-client": "^3.0.0",
    "commander": "^12.0.0",
    "dotenv": "^16.0.0",
    "exceljs": "^4.4.0",
    "jszip": "^3.10.1",
    "mammoth": "^1.8.0",

• Confidence: 92% confidence
• Finding: "dotenv": "^16.0.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"@microsoft/microsoft-graph-client": "^3.0.0",
    "commander": "^12.0.0",
    "dotenv": "^16.0.0",
    "exceljs": "^4.4.0",
    "jszip": "^3.10.1",
    "mammoth": "^1.8.0",
    "pdf-parse": "^1.1.1",

• Confidence: 94% confidence
• Finding: "exceljs": "^4.4.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"commander": "^12.0.0",
    "dotenv": "^16.0.0",
    "exceljs": "^4.4.0",
    "jszip": "^3.10.1",
    "mammoth": "^1.8.0",
    "pdf-parse": "^1.1.1",
    "pptxgenjs": "^3.12.0"

• Confidence: 94% confidence
• Finding: "jszip": "^3.10.1"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"dotenv": "^16.0.0",
    "exceljs": "^4.4.0",
    "jszip": "^3.10.1",
    "mammoth": "^1.8.0",
    "pdf-parse": "^1.1.1",
    "pptxgenjs": "^3.12.0"
  },

• Confidence: 95% confidence
• Finding: "mammoth": "^1.8.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"exceljs": "^4.4.0",
    "jszip": "^3.10.1",
    "mammoth": "^1.8.0",
    "pdf-parse": "^1.1.1",
    "pptxgenjs": "^3.12.0"
  },
  "engines": {

• Confidence: 94% confidence
• Finding: "pdf-parse": "^1.1.1"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"jszip": "^3.10.1",
    "mammoth": "^1.8.0",
    "pdf-parse": "^1.1.1",
    "pptxgenjs": "^3.12.0"
  },
  "engines": {
    "node": ">=18.0.0"

• Confidence: 92% confidence
• Finding: "pptxgenjs": "^3.12.0"

Known Vulnerable Dependency: @azure/identity==4.0.0 — 1 advisory(ies): CVE-2024-35255 (Azure Identity Libraries and Microsoft Authentication Library Elevation of Privi)

Low

• Category: Supply Chain
• Confidence: 89% confidence
• Finding: @azure/identity==4.0.0

Known Vulnerable Dependency: mammoth==1.8.0 — 1 advisory(ies): CVE-2025-11849 (Mammoth is vulnerable to Directory Traversal)

Low

• Category: Supply Chain
• Confidence: 91% confidence
• Finding: mammoth==1.8.0

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.