Clippy - Microsoft 365 CLI

Microsoft 365 / Outlook CLI for calendar and email. Use when managing Outlook calendar (view, create, update, delete events, find meeting times, respond to invitations), sending/reading emails, or searching for people/rooms in the organization.

Install only if you trust the external `clippy` CLI and are comfortable letting an agent operate through your Microsoft 365 session. Review the repository before running `bun install`, require explicit confirmation before sending, forwarding, reply-all, deleting, moving, or downloading sensitive items, and avoid enabling keepalive as a background service unless you need it and know how to stop it.

Type: OpenClaw Skill Name: clippy Version: 1.2.0 The skill is classified as suspicious due to two main indicators found in `SKILL.md`. First, the installation instructions include `bun install`, which is a common vector for supply chain attacks as it can execute arbitrary code via `postinstall` scripts. Second, the documentation recommends setting up the `clippy keepalive` command as a `launchd` or `systemd` service for persistent operation. While presented for a functional purpose, this capability could be abused to establish persistence for malicious activities if the underlying `clippy` tool or its dependencies were compromised.