Microsoft Learn documentation

• Risk level: Low
• Analyzed: May 1, 2026, 5:17 AM
• Findings: 1
• Version: 1.0.0

Overview

This instruction-only skill is coherently focused on searching and fetching Microsoft Learn documentation, with a disclosed external MCP server dependency to verify.

This looks safe for its stated purpose. Before installing, make sure your MCP setup uses the official Microsoft Learn endpoint, and avoid sending private or confidential information in documentation search queries unless you are comfortable with that provider interaction.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

If the MCP server is misconfigured, documentation queries could be sent to an unintended provider or return untrusted results.

Why it was flagged

The skill depends on an external MCP server that is not installed or defined by the supplied package artifacts; this is disclosed and purpose-aligned, but users should ensure the configured server is the official Microsoft Learn MCP endpoint.

Skill content

compatibility: Requires Microsoft Learn MCP Server (https://learn.microsoft.com/api/mcp)

Recommendation

Configure the MCP server explicitly and verify it uses the official learn.microsoft.com endpoint before relying on results.