Clippy - Microsoft 365 CLI

Microsoft 365 / Outlook CLI for calendar and email. Use when managing Outlook calendar (view, create, update, delete events, find meeting times, respond to invitations), sending/reading emails, or searching for people/rooms in the organization.

Install only if you trust the external `clippy` CLI and are comfortable letting an agent operate through your Microsoft 365 browser session. Review the repository and dependencies before running `bun install`, require explicit confirmation before send, reply-all, forward, delete, move, or attachment-download actions, and avoid keepalive as a background service unless you need it and can secure and stop it.

Type: OpenClaw Skill Name: clippy Version: 1.2.0 The skill is classified as suspicious due to two main indicators found in `SKILL.md`. First, the installation instructions include `bun install`, which is a common vector for supply chain attacks as it can execute arbitrary code via `postinstall` scripts. Second, the documentation recommends setting up the `clippy keepalive` command as a `launchd` or `systemd` service for persistent operation. While presented for a functional purpose, this capability could be abused to establish persistence for malicious activities if the underlying `clippy` tool or its dependencies were compromised.