Office 365 Connector

• Analyzed: May 12, 2026, 3:36 AM
• Findings: 1
• Version: 2.0.0
• Hash: 9d77497d5c32da8d04d522f8fa9720e634f5df2a5adde2409ce99e7c74b815ce
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill is classified as suspicious due to its broad and high-risk delegated permissions, including `Mail.ReadWrite`, `Mail.Send`, `Calendars.ReadWrite`, and `Contacts.ReadWrite`. While these permissions are explicitly declared in `SKILL.md` and `references/permissions.md` and are necessary for the skill's stated purpose as a comprehensive Office 365 connector, they grant extensive control over a user's email, calendar, and contacts. The skill demonstrates good security practices by storing credentials and tokens with restricted file permissions (0600) in `~/.openclaw/auth/` and communicating only with legitimate Microsoft OAuth and Graph API endpoints. There is no evidence of intentional malicious behavior, data exfiltration to unauthorized endpoints, or prompt injection attempts against the AI agent in the documentation.