Security audit
Microsoft Teams
Security checks for vulnerabilities and agentic risk
Overview
This package is a Microsoft Teams channel plugin whose sensitive Teams, Graph, credential, and state behavior is disclosed and aligned with its purpose.
Install this only if you intend to let OpenClaw agents operate in Microsoft Teams. Before enabling it, verify package provenance, keep DM and group allowlists tight, grant only necessary Microsoft Graph permissions, and avoid groupPolicy="open" or delegated/SSO features unless you need them.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.