Microsoft Learn documentation

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the MCP server is misconfigured, documentation queries could be sent to an unintended provider or return untrusted results.

Why it was flagged

The skill depends on an external MCP server that is not installed or defined by the supplied package artifacts; this is disclosed and purpose-aligned, but users should ensure the configured server is the official Microsoft Learn MCP endpoint.

Skill content

compatibility: Requires Microsoft Learn MCP Server (https://learn.microsoft.com/api/mcp)

Recommendation

Configure the MCP server explicitly and verify it uses the official learn.microsoft.com endpoint before relying on results.