← 返回 Skills 市场

M365 (Microsoft) Task Manager by altf1be

Name: M365 (Microsoft) Task Manager by altf1be
Author: abdelkrim

作者 Abdelkrim from Brussels · GitHub ↗ · v0.3.0 · MIT-0

cross-platform ⚠ suspicious

286

总下载

当前安装

版本数

在 OpenClaw 中安装

/install m365-task-manager-by-altf1be

功能描述

Manage lightweight Microsoft 365 task workflows with Microsoft To Do and Planner. Use when a user needs to quickly create, assign, track, and follow up opera...

使用说明 (SKILL.md)

M365 Task Manager

Use this skill to perform real Microsoft Graph CRUD operations for Microsoft To Do tasks.

Setup

Create an Entra app registration for delegated sign-in.
Add Microsoft Graph delegated permissions:
- Tasks.ReadWrite
- User.Read
- offline_access
Configure environment variables:

M365_TENANT_ID=your-tenant-id-or-common
M365_CLIENT_ID=your-public-client-app-id
# optional
M365_TOKEN_CACHE_PATH=/home/user/.cache/openclaw/m365-task-manager-token.json

Install dependencies at repo root:

npm install

On first run, the script uses Device Code login and caches tokens for reuse.

Commands

# profile connection
node skills/m365-task-manager/scripts/m365-todo.mjs info

# list Microsoft To Do lists
node skills/m365-task-manager/scripts/m365-todo.mjs lists

# list tasks
node skills/m365-task-manager/scripts/m365-todo.mjs tasks:list --list-name "Tasks"

# create task
node skills/m365-task-manager/scripts/m365-todo.mjs tasks:create --list-name "Tasks" --title "2026-03-01-submit-weekly-status-report" --due 2026-03-01

# update task
node skills/m365-task-manager/scripts/m365-todo.mjs tasks:update --list-name "Tasks" --task-id \x3CTASK_ID> --status inProgress

# delete task
node skills/m365-task-manager/scripts/m365-todo.mjs tasks:delete --list-name "Tasks" --task-id \x3CTASK_ID>

Operating standard

Task title pattern: \x3Cproject>-\x3Cdate>-\x3Cperson>-\x3Caction>
Required fields: title, owner, due date, status
Status values: Open, In Progress, Blocked, Done

References

references/playbook.md for operating guidance.

Scripts

scripts/m365-todo.mjs for Graph CRUD on Microsoft To Do.
scripts/format-task-name.sh for deterministic task naming.

Author

Abdelkrim BOUJRAF - ALT-F1 SRL - https://www.alt-f1.be

License

MIT

安全使用建议

This skill appears to do exactly what it says: it uses delegated Device Code flow and Microsoft Graph to create and manage To Do tasks. Before installing: (1) inspect the package.json and dependency versions that npm will install (msal-node and any transitive deps); (2) ensure the Entra app registration only has the listed delegated scopes (Tasks.ReadWrite, User.Read, offline_access) and is configured as a public client if you don't want to supply a secret; (3) be aware that the skill stores tokens locally (default path shown) — verify the cache file location and permissions or set M365_TOKEN_CACHE_PATH to a secure location; (4) device-code auth will require a human to complete sign-in the first time; and (5) consider creating a dedicated app/tenant or least-privilege account for automation to limit blast radius. If you want higher assurance, request the skill author's package.json and the exact dependency versions before running npm install.

功能分析

Type: OpenClaw Skill Name: m365-task-manager-by-altf1be Version: 0.3.0 The skill provides legitimate functionality for managing Microsoft To Do tasks via the Microsoft Graph API. It uses standard MSAL authentication (Device Code flow) and local token caching in scripts/m365-todo.mjs. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found in the code or documentation.

能力评估

✓ Purpose & Capability

Name/description (M365 To Do CRUD) align with the included scripts. The env vars (M365_TENANT_ID, M365_CLIENT_ID) and the Microsoft Graph endpoints in the code are appropriate for the stated purpose.

✓ Instruction Scope

SKILL.md instructs the user to register an app, grant delegated Graph scopes, set the two env vars, run npm install, and use the provided CLI commands. Runtime code only accesses the declared env vars and interacts with Microsoft identity (login.microsoftonline.com) and Graph (graph.microsoft.com). The only extra behavior is local token caching (documented).

✓ Install Mechanism

There is no registry install spec (instruction-only), and the code uses standard Node packages (msal-node implied). No arbitrary downloads or extract-from-URL actions are present in the skill bundle. The user must run npm install locally; review package.json before installing.

✓ Credentials

Requested env vars are limited to tenant and client ID (plus an optional token cache path). No client secrets or unrelated credentials are required. These are proportionate for a delegated device-code flow.

ℹ Persistence & Privilege

always is false. The skill persists tokens to a local cache file (default: ~/.cache/openclaw/m365-task-manager-token.json). This is expected for offline reuse but means long-lived tokens/refresh tokens are stored on disk; check file location and permissions if that is a concern.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install m365-task-manager-by-altf1be
安装完成后，直接呼叫该 Skill 的名称或使用 /m365-task-manager-by-altf1be 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.3.0

Rename display name, use explicit env var access, declare optional M365_TOKEN_CACHE_PATH

v1.0.0

Initial publish

v0.1.1

Rename skill with -by-altf1be suffix and align metadata/docs.

元数据

Slug m365-task-manager-by-altf1be

版本 0.3.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 3

常见问题