Security audit

Ms365 Cli

Security checks for vulnerabilities and agentic risk

Overview

This skill matches its Microsoft 365 email and calendar purpose, but it gives an agent live account-changing powers without strong confirmation safeguards.

Review before installing. Use the narrowest Microsoft 365 permissions available, authenticate only when needed, require the agent to show the exact message or event before any send, move, delete, or calendar change, avoid permanent deletion unless explicitly intended, and log out of ms365 when finished.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The trigger description uses broad natural-language phrases like "read my email" and "check my calendar" plus a catch-all condition for "any Outlook/Microsoft 365 email or calendar operations," which can cause the skill to activate too easily. In an agent environment with shell access and mailbox/calendar mutation capabilities, overbroad activation increases the chance of unintended access, sending, deletion, or scheduling actions from ambiguous user prompts.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The skill documents destructive operations such as permanent email deletion and calendar deletion without requiring confirmation, preview, or user-facing warnings about impact. Because this skill is designed to operate on a real user's Microsoft 365 account via CLI, a mistaken ID, ambiguous instruction, or accidental trigger could irreversibly delete emails or remove events.

Static analysis

No suspicious patterns detected.