Microsoft Teams

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:14 PM UTC
• Version:
  1.0.6

Overview

This is a coherent Microsoft Teams integration, but it can access and change Teams content after the user authorizes Membrane.

Install only if you trust Membrane and the npm CLI package. Review the Microsoft Teams consent screen carefully, use the least-privileged account or tenant policy available, and require explicit confirmation before the agent sends messages, updates Teams content, creates teams or channels, uses proxy requests, or changes membership.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The skill advertises mutating actions such as creating teams, updating channels, sending messages, and adding members without any warning, confirmation guidance, or guardrails around live-impact operations. In an agent setting, this increases the chance of unintended changes to production collaboration data, accidental message sending, or unauthorized workflow disruption if the agent acts on ambiguous prompts.

VirusTotal

63/63 vendors flagged this skill as clean.