ClawHub
Back to skill

Security audit

Dynamics 365 CRM

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Dynamics 365 CRM integration that can change CRM records, so it should be installed only by users authorized to use that tenant.

Install only if you trust the publisher and are authorized to create or update records in the target Dynamics 365 tenant. Use least-privilege Azure app permissions, keep client secrets and tokens out of prompts/logs, store them in a secret manager, and test with non-production CRM data before using it on real customer or deal records.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The activation guidance encourages creating and updating opportunities, leads, contacts, accounts, and tasks, which commonly include personal and commercially sensitive data, but it does not warn users about that data being stored in an external CRM. In this context, the omission is security-relevant because users may provide PII, customer notes, or deal information without informed consent or data-handling awareness.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill requests client credentials and describes OAuth token handling, but it gives no privacy or security warning about transmitting data and using privileged CRM access against Dataverse. Because these credentials can enable broad record access/modification, the lack of warning and scope guidance makes accidental overprivileged use and mishandling of sensitive CRM data more likely.

Static analysis

No suspicious patterns detected.