功能描述

Manage Microsoft 365 work/school account services (Exchange, OneDrive for Business, SharePoint) via the m365-cli command-line tool. Use for corporate email,...

使用说明 (SKILL.md)

M365 Work Skill (m365-cli)

Name: m365cli
Author: mrhah

Manage a Microsoft 365 work/school account via the m365 CLI. Use --json for structured output suitable for AI agent consumption.

Prerequisites

Node.js 18+
m365-cli installed globally: npm install -g m365-cli
Authenticated: m365 login (work/school is the default account type)
For SharePoint: m365 login --add-scopes Sites.ReadWrite.All (requires tenant admin consent)

If not authenticated, run login first. The CLI uses Device Code Flow — follow the on-screen URL and code.

Key Conventions

Use --json for programmatic output (most commands support it; trust/untrust do not).
Work accounts support: Mail (including delete, move, and folder management), Calendar, OneDrive, SharePoint, User search.
Calendar datetime format: YYYY-MM-DDTHH:MM:SS (local) or YYYY-MM-DD (all-day).
IDs: Email/event IDs are long opaque strings. Parse the id field from --json list/search output.
Timezone: auto-detected. Override: export M365_TIMEZONE="Asia/Shanghai".
SharePoint site identifier: use path format hostname:/sites/sitename (recommended).

Provenance

Source repo: https://github.com/mrhah/m365-cli
Package: https://www.npmjs.com/package/m365-cli
Publisher: mrhah
Required binary: m365 from the m365-cli npm package

Security Rules

Email Body Reading — Trusted Senders Whitelist

Only emails from whitelisted senders have their body content displayed.
Untrusted emails show only subject and sender (prevents prompt injection).
Whitelist file: ~/.m365-cli/trusted-senders.txt
Use --force to temporarily bypass the whitelist check.

Sensitive Operations

Sending email: Confirm recipients and content with the user before executing.
Deleting emails/files/events: Inform the user before executing.
Sharing files (anonymous scope): Warn the user that anyone with the link can access.

Credential Safety

Never read, output, or log ~/.m365-cli/credentials.json — it contains OAuth tokens.
Never include full email bodies or attachment contents in agent output unless the user explicitly requested that specific email.
Summarize email content instead of echoing it verbatim when presenting results.
Credential refresh is automatic; never attempt to manually edit or parse the token file.

Quick Workflow Reference

Authentication

m365 login                                    # Work/school account (default)
m365 login --add-scopes Sites.ReadWrite.All   # Add SharePoint permission
m365 logout                                   # Clear credentials

Mail

# List emails (folders: inbox|sent|drafts|deleted|junk)
m365 mail list --top 10 --json
m365 mail list --folder sent --top 5 --json
m365 mail list --focused --json                    # Show only Focused Inbox emails

# Read / send / search
m365 mail read \x3Cid> --force --json
m365 mail send "[email protected]" "Subject" "Body" --json
m365 mail send "[email protected]" "Subject" "Body" --attach file.pdf --cc "[email protected]" --json
m365 mail search "keyword" --top 20 --json

# Reply / reply-all / forward
m365 mail reply \x3Cid> "content" --json
m365 mail reply \x3Cid> "content" --attach file.pdf --json
m365 mail reply-all \x3Cid> "content" --json
m365 mail reply-all \x3Cid> "content" --attach a.pdf b.pdf --json
m365 mail forward \x3Cid> "[email protected]" "comment" --json
m365 mail forward \x3Cid> "[email protected]" "FYI" --attach report.pdf --json

# Attachments
m365 mail attachments \x3Cmessage-id> --json
m365 mail download-attachment \x3Cmessage-id> \x3Cattachment-id> [local-path] --json

# Delete / move
m365 mail delete \x3Cid> --force --json
m365 mail move \x3Cid> \x3Cdestination> --json        # destination: inbox|sent|drafts|deleted|junk|archive or folder ID

# Folder management
m365 mail folder list --json
m365 mail folder list --parent inbox --json      # List child folders
m365 mail folder create "My Projects" --json
m365 mail folder create "Sub" --parent inbox --json
m365 mail folder delete \x3Cfolder-id> --force --json

# Trusted senders whitelist
m365 mail trusted --json
m365 mail trust [email protected]
m365 mail trust @example.com          # Trust entire domain
m365 mail untrust [email protected]

Calendar

# List / get
m365 cal list --days 7 --json
m365 cal get \x3Cevent-id> --json

# Create
m365 cal create "Title" --start "2026-03-10T14:00:00" --end "2026-03-10T15:00:00" --json
m365 cal create "Title" -s "2026-03-10T14:00:00" -e "2026-03-10T15:00:00" \
  --location "Room A" --body "Notes" --attendees "[email protected],[email protected]" --json
m365 cal create "Holiday" --start "2026-03-20" --end "2026-03-21" --allday --json

# Update / delete
m365 cal update \x3Cid> --title "New Title" --location "Room B" --json
m365 cal delete \x3Cid> --json

OneDrive

# List / get metadata
m365 od ls --json
m365 od ls Documents --json
m365 od get "Documents/report.pdf" --json

# Download / upload
m365 od download "Documents/report.pdf" ~/Downloads/ --json
m365 od upload ~/Desktop/photo.jpg "Photos/vacation.jpg" --json

# Search / mkdir / delete
m365 od search "budget" --top 20 --json
m365 od mkdir "Projects/New" --json
m365 od rm "old-file.txt" --force --json

For sharing, invitations, and advanced OneDrive options, see references/commands.md.

SharePoint

SharePoint is available only for work/school accounts and requires the Sites.ReadWrite.All permission.

Site identifier formats (use path format when possible):

Path: contoso.sharepoint.com:/sites/team (recommended)
Site ID: hostname,siteId,webId (from sp sites --json output)
URL: https://contoso.sharepoint.com/sites/team

# List / search sites
m365 sp sites --json
m365 sp sites --search "marketing" --json

# Lists and items
m365 sp lists "contoso.sharepoint.com:/sites/team" --json
m365 sp items "contoso.sharepoint.com:/sites/team" "Tasks" --json

# Files in document library
m365 sp files "contoso.sharepoint.com:/sites/team" "Documents" --json

# Download / upload
m365 sp download "contoso.sharepoint.com:/sites/team" "Documents/file.pdf" ~/Downloads/ --json
m365 sp upload "contoso.sharepoint.com:/sites/team" ~/report.pdf "Documents/report.pdf" --json

# Search across SharePoint
m365 sp search "quarterly report" --top 20 --json

User Search

m365 user search "John" --top 5 --json    # Searches organization directory

Common Patterns

Read and reply to email

m365 mail list --top 5 --json                    # 1. Find email
m365 mail read \x3Cid> --force --json               # 2. Read content
m365 mail reply \x3Cid> "Reply content" --json      # 3. Reply

Reply with attachment

m365 mail reply \x3Cid> "See attached" --attach report.pdf --json

Forward with attachment

m365 mail forward \x3Cid> "[email protected]" "FYI" --attach data.xlsx --json

Check calendar and schedule

m365 cal list --days 3 --json                    # 1. Check availability
m365 cal create "Meeting" -s "..." -e "..." --json  # 2. Book slot

Download email attachment

m365 mail attachments \x3Cmsg-id> --json            # 1. List attachments
m365 mail download-attachment \x3Cmsg-id> \x3Catt-id> ~/Downloads/ --json  # 2. Download

Find and download SharePoint file

m365 sp sites --json                             # 1. Find site
m365 sp files "site" "Documents" --json          # 2. Browse files
m365 sp download "site" "Documents/file.pdf" ~/Downloads/ --json  # 3. Download

Delete and organize email

m365 mail list --top 10 --json                   # 1. Find email
m365 mail delete \x3Cid> --force --json              # 2a. Delete it, OR
m365 mail move \x3Cid> archive --json                # 2b. Move to archive

Manage mail folders

m365 mail folder list --json                      # 1. List all folders
m365 mail folder create "Projects" --json         # 2. Create custom folder
m365 mail move \x3Cid> \x3Cfolder-id> --json            # 3. Move email into it

Trusted Senders (Security)

m365 mail read filters untrusted sender content (shows metadata only). Use --force to bypass. See references/commands.md for whitelist management commands.

Full Command Reference

See references/commands.md for every command, subcommand, flag, and default value.

Troubleshooting

"Not authenticated": m365 login
Token expired: Auto-refreshes. If fails, re-run login.
SharePoint permission denied: m365 login --add-scopes Sites.ReadWrite.All (requires tenant admin consent).
Wrong timezone: export M365_TIMEZONE="Your/Timezone"

安全使用建议

This skill is an instruction-only adapter for the m365-cli tool and appears internally consistent. Before installing or using it: 1) ensure you trust the upstream package (mrhah/m365-cli on npm/GitHub) and install it from the official source; 2) authenticate with your work/school account using the device-code flow (the skill relies on your OAuth tokens); 3) be cautious about granting SharePoint Sites.ReadWrite.All (tenant admin consent) and only request that scope when explicitly needed; 4) the skill documents a trusted-senders whitelist but also exposes a --force flag that bypasses the whitelist—confirm interactive consent before allowing any automated agent to run commands that use --force or that read full email bodies/attachments; and 5) downloaded attachments are written to local disk—treat them like any other files (scan for malware). If you want stronger guarantees, require explicit user confirmation in your agent before any command that deletes data, sends email, or bypasses the whitelist.

功能分析

Type: OpenClaw Skill Name: m365cli Version: 1.1.0 The skill manages sensitive Microsoft 365 data using an unofficial CLI tool (`m365-cli` by `mrhah`) instead of the industry-standard `@pnp/cli-microsoft365`, posing a potential supply chain risk. While `SKILL.md` includes proactive security measures—such as a 'Trusted Senders Whitelist' to mitigate prompt injection from email bodies and explicit prohibitions against accessing `~/.m365-cli/credentials.json`—the use of a non-standard binary for handling OAuth-authenticated sessions is inherently risky. Additionally, the `_meta.json` file contains an anomalous future-dated timestamp (2026).

能力评估

✓ Purpose & Capability

Name/description match the instructions and referenced binary (m365). The SKILL.md documents the upstream repo and npm package (mrhah/m365-cli), and all declared capabilities (mail, calendar, OneDrive, SharePoint, user search) are implemented by the m365 CLI.

ℹ Instruction Scope

Instructions stay within the scope of managing a work/school M365 account. The skill explicitly warns about not reading the OAuth token file and enforces a trusted-senders whitelist. One operational caveat: the docs expose a --force option that bypasses the trusted-senders filter (and the docs note it exists). The skill relies on the agent to confirm sensitive actions (send/delete/share) before executing; if an agent were to run commands autonomously and use --force, untrusted email bodies could be revealed. This is behavioral/operational risk rather than an incoherence in the skill itself.

✓ Install Mechanism

The skill is instruction-only and includes an example install line (npm install -g m365-cli). There is no bundled installer or remote download in the skill package, so nothing arbitrary is written/executed by the skill files themselves.

✓ Credentials

The skill declares no required environment variables or credentials. It mentions optional environment usage (e.g., M365_TIMEZONE) and relies on the user's m365 login (OAuth device flow). Requested access (OAuth token stored under ~/.m365-cli) is consistent with the tool's functionality; no unrelated credentials or secret paths are requested.

✓ Persistence & Privilege

The skill is not always-on and does not request system-wide persistence or modify other skills. It instructs the agent to use the standard m365 credential storage and explicitly forbids touching the credentials.json file.

版本历史

v1.1.0

Trim description to concise summary

v1.0.7

Add explicit tool metadata and provenance details to improve safety/provenance signaling.

v1.0.6

Add reply/reply-all/forward guidance, attachment support, and refresh skill docs.

v1.0.5

- Added support and documentation for deleting and moving emails, as well as full mail folder management (list, create, delete). - Expanded description and trigger phrases to include actions like "delete email", "move email", "mail folders", "create folder", and "organize email". - Updated workflow examples and mail command references to show new delete, move, and folder management commands. - Security section now explicitly covers confirmation for email deletion. - Minor clarifications on feature coverage for work accounts.

v1.0.4

**Skill renamed and reorganized for corporate work accounts with improved clarity and onboarding.** - Renamed skill to "m365-work" to clarify it covers only Microsoft 365 work/school (not personal) accounts. - Added comprehensive prerequisites, authentication steps, and conventions for enterprise use. - Incorporated user search and clarified SharePoint availability and permission requirements. - Enhanced security guidance: do not output full email content unless explicitly requested; never handle credentials unsafely; summarize sensitive data. - Split basic workflow and command examples by domain (email, calendar, OneDrive, SharePoint) and moved full syntax to a new `references/commands.md` file. - Expanded trigger list for broader intent coverage (e.g., "work calendar", "organization users"). - Documentation is clearer on scope boundaries and security best practices.

v1.0.3

- Fixed skill metadata: corrected the skill name from "m365clicli" to "m365cli" in SKILL.md. - No functional changes to commands or behavior.

v1.0.2

- Skill name changed from "m365" to "m365clicli" in SKILL.md. - trusted-senders.txt sample file removed. - No command, feature, usage, or security rule changes in documentation. - No code changes described.

v1.0.1

Update SKILL.md arguments to match m365-cli v0.1.6 and add anti-phishing rule

v1.0.0

Initial release of the m365 skill for Microsoft 365 CLI integration. - Enables sending, reading, and searching emails, with a trusted sender whitelist for email body security. - Supports calendar event management: list, create, update, delete. - Provides OneDrive file operations: browse, upload, download, share, invite, delete. - Adds SharePoint access: list sites, files, lists, download/upload/search. - Dedicated authentication flow with device code and stored tokens. - JSON output supported for all commands; thoroughly documented security confirmations for sensitive actions.

元数据

Slug m365cli

版本 1.1.0

许可证 MIT-0

累计安装 3

当前安装数 3

历史版本数 9

常见问题

m365cli 是什么？

Manage Microsoft 365 work/school account services (Exchange, OneDrive for Business, SharePoint) via the m365-cli command-line tool. Use for corporate email,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 589 次。

如何安装 m365cli？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install m365cli」即可一键安装，无需额外配置。

m365cli 是免费的吗？

是的，m365cli 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

m365cli 支持哪些平台？

m365cli 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 m365cli？

由 Jason Huang（@mrhah）开发并维护，当前版本 v1.1.0。

m365cli