Microsoft Sharepoint

Microsoft Sharepoint integration. Manage Sites. Use when the user wants to interact with Microsoft Sharepoint data.

Before installing or using this skill: 1) Understand that it relies on a third‑party service (Membrane / getmembrane.com) — SharePoint data and tokens will be handled by that service; confirm your organization's policy allows routing data through it. 2) The SKILL.md requires installing a global npm CLI (npm install -g) — this changes your system and may require admin rights. 3) Authentication is interactive (browser/code) — an autonomous/headless agent may not be able to complete login without extra setup. 4) Ask the skill author to update metadata to declare the Membrane account requirement, any env vars, and exactly how/where credentials and cached tokens are stored. 5) Verify Membrane's privacy/security docs and the referenced GitHub repository before granting access. If you need the agent to operate unattended, request explicit non‑interactive auth instructions and a clear data handling policy from the provider.

Type: OpenClaw Skill Name: microsoft-sharepoint Version: 1.0.5 The skill instructs the AI agent to perform high-risk operations including global software installation ('npm install -g @membranehq/cli') and the execution of shell commands to interact with the Microsoft SharePoint API. While these capabilities are plausibly needed for the stated purpose, the instructions allow for raw API request proxying ('membrane request') and rely on external CLI tools, which increases the attack surface for command injection or supply chain risks. Additionally, the '_meta.json' file contains a future-dated 'publishedAt' timestamp (2026), which is anomalous.