Ms365 Cli

Manage Microsoft 365 Emails and Calendar using the ms365 CLI. Trigger this skill when the user needs to "read my email", "send an email", "search emails", "c...

This skill is coherent with its description: it relies on the ms365 CLI and your existing Microsoft/Azure AD authentication. Before enabling it, (1) confirm you trust the agent to access your mail/calendar if you have an active ms365 login — the agent will be able to read/send/move/delete messages using the CLI; (2) install the ms365 CLI from a trusted source (verify the npm package and publisher) and complete the interactive ms365 auth login yourself; (3) prefer creating an Azure AD app with minimal delegated permissions and use the device-code flow as documented; (4) restrict agent autonomy or require manual confirmation for sensitive actions (send/delete) if you want to prevent unintended operations; and (5) revoke the ms365 CLI tokens or logout (ms365 auth logout) if you later want to remove the agent's access. No regex scan findings were present, but that is expected for an instruction-only skill.

Type: OpenClaw Skill Name: ms365-cli Version: 1.1.0 The skill bundle facilitates Microsoft 365 management via a CLI tool, but it recommends installing a non-standard package 'ms365' (the official Microsoft CLI is 'm365' or '@pnp/cli-microsoft365') and uses a command syntax that deviates from official tools. Furthermore, the '_meta.json' file contains a future-dated 'publishedAt' timestamp (April 2026). While no explicitly malicious logic or data exfiltration is present in the provided files, the reliance on a potentially untrusted or typosquatted dependency (ms365) poses a supply chain risk.