SharePoint by altf1be

Secure SharePoint file operations and Office document intelligence via Microsoft Graph API — certificate auth, Sites.Selected, read/write Word (mammoth), Exc...

This package appears to do what it says: it helps you operate on a single SharePoint site using certificate-based Microsoft Graph auth and extracts text from Office files for downstream AI processing. Before installing, verify the repository/source is trusted (check the GitHub link), keep the certificate file secure (do not commit it), and grant the app only the minimum Sites.Selected permissions and site-level access required. Note that the script extracts text but does not itself call LLMs — any summarization/AI steps are expected to be done by your OpenClaw agent or other tooling. Also be aware some Azure client dependencies indicate Node >=20 in their transitive manifests; use a compatible Node version to avoid runtime issues. If you want extra assurance, review the included scripts for any outbound network calls beyond Microsoft Graph endpoints and confirm the SP_CERT_PATH points to a local certificate you control.

Type: OpenClaw Skill Name: sharepoint-by-altf1be Version: 2.0.0 The SharePoint skill bundle provides legitimate integration with Microsoft Graph API for document management. It implements several security best practices, including certificate-based authentication, path traversal checks in the 'safePath' helper, file size limits, and a mandatory confirmation flag for delete operations. The code in 'scripts/sharepoint.mjs' is well-structured, lacks obfuscation, and uses standard libraries for parsing Office documents (mammoth, exceljs, jszip, pdf-parse) to provide text content to the AI agent.