Security audit
Security checks for vulnerabilities and agentic risk
This skill is a read-only helper for extracting visible Microsoft Teams content from an already signed-in browser tab, with sensitive-data caveats users should understand before use.
Install only if you are authorized to access the Teams content involved. Close unrelated Teams tabs before use, review the fpx/Transporter pairing scope, revoke the grant when no longer needed, and avoid logging or sharing extracted messages unless your organization permits it.
The skill explicitly instructs the agent to read data from a signed-in Microsoft Teams browser tab, which may expose sensitive chats, channel posts, and activity data. While the capability is presented as read-only and operationally useful, it lacks a prominent privacy/sensitivity warning and user-consent guardrail despite targeting highly sensitive enterprise communications.
These commands explicitly extract Microsoft Teams chat messages, channel posts, and activity feed contents from a signed-in browser session, which commonly contain sensitive business communications, personal data, or confidential project details. The file presents this access as routine operational usage without any explicit privacy, consent, or data-handling warning, increasing the risk that users or downstream agents will exfiltrate private communications without understanding the sensitivity.
No suspicious patterns detected.
