Outlook-email

Microsoft Outlook/Live.com email client via Microsoft Graph API. List, search, read, send, and reply to emails.

Security Scan

The skill's description matches an Outlook CLI, but the package is instruction-only and claims bundled CLI files that are not present — verify the external repository and code before installing or handing over OAuth credentials.

Purpose & Capability

The SKILL.md and README describe an 'outlook' CLI script and config files (e.g., ./outlook, ~/.config/outlook-cli/config.json), but the skill bundle contains only README.md and SKILL.md (no CLI code). The metadata requires python3 and the requests package which is appropriate for a Python CLI, yet no install/download is provided. This mismatch is a red flag: either the skill expects the user to manually clone the GitHub repo (not enforced/automated) or the distributed package is incomplete.

Instruction Scope

Instructions are focused on registering an Azure AD app, configuring client ID/secret, and performing OAuth to Microsoft Graph — all expected for Outlook integration. They direct the tool to store tokens and client secrets in ~/.config/outlook-cli, which is reasonable for a CLI but is not declared in the registry's required config paths. There are no instructions to read unrelated system files, but the guidance to paste callback URLs and store secrets locally means users will provide sensitive credentials that must be protected.

Install Mechanism

There is no automated install spec (install is 'manual'). README suggests cloning https://github.com/abhiramee08b021/outlook-cli to obtain the tool. Manual install is lower technical risk than arbitrary downloads, but the registry package does not include or fetch the actual code — the user must trust and inspect the external GitHub repo before running it.

Credentials

The skill does not request unrelated environment variables. It legitimately requires Azure AD credentials (client ID and secret) to access Microsoft Graph; these are expected for the described functionality. However, those credentials are collected interactively and stored locally rather than declared as required env vars in the registry, so users should confirm local storage practices before providing secrets.

Persistence & Privilege

The skill is not always-enabled and is user-invocable. Model invocation is allowed (disable-model-invocation: false), so an agent could call the skill autonomously. Combined with OAuth tokens that grant mailbox access, autonomous invocation could let the skill read or send mail without explicit user action — ensure you understand the scopes granted and consider restricting autonomous use if undesired.

What to consider before installing

Do not install or run the tool without first checking the external GitHub repository referenced in README/SKILL.md. Verify the repository contains the 'outlook' CLI, review its source for any network endpoints or unexpected behavior (especially any code that uploads data to third-party servers), and confirm how config and token files are stored (permissions, plaintext). When creating the Azure AD app, grant the minimal Microsoft Graph scopes required (least privilege), use a temporary test account if possible, and avoid reusing high-privilege credentials. If you want the agent to use this skill, consider disabling autonomous invocation or limiting the app scopes so an autonomous skill cannot send or delete mail without explicit consent.

Outlook CLI

Command-line email client for Microsoft Outlook/Live/Hotmail using Microsoft Graph API.

Setup

1. Create Azure AD App: https://portal.azure.com → App registrations

   • Name: outlook-cli
   • Account type: "Personal Microsoft accounts only"
   • Redirect URI: http://localhost:8080/callback

2. Get credentials from your app registration

3. Configure:

   outlook configure
   

4. Authenticate:

   outlook auth
   

Commands

Command	Description
outlook list [n]	List recent emails
outlook search "query" [n]	Search emails
outlook read <id>	Read email by ID
outlook send --to ...	Send email
outlook reply <id>	Reply to email
outlook status	Check auth status

Examples

List emails:

outlook list 20

Search:

outlook search "from:linkedin.com"
outlook search "subject:invoice"

Send:

outlook send --to "[e-mail]" --subject "Hello" --body "Message"
outlook send --to "[e-mail],[e-mail]" --cc "[e-mail]" --subject "Update" --body-file ./msg.txt

Reply:

outlook reply EMAIL_ID --body "Thanks!"
outlook reply EMAIL_ID --all --body "Thanks everyone!"

Search Operators

• from:[e-mail] - Sender
• subject:keyword - Subject line
• body:keyword - Email body
• received:YYYY-MM-DD - Date
• hasattachment:yes - Has attachments

Files

• SKILL.md - This documentation
• outlook - Main CLI script
• README.md - Full documentation