Openclaw Skill M365 Task Manager

Manage lightweight Microsoft 365 task workflows with Microsoft To Do and Planner. Use when a user needs to quickly create, assign, track, and follow up opera...

This skill appears to do exactly what it says: call Microsoft Graph to manage To Do tasks. Before installing or running it: 1) create a proper Entra app with only the delegated Graph scopes you intend to grant; 2) review the repository (especially package.json and dependencies) before running `npm install`; 3) be aware the script uses Device Code flow and will cache tokens locally (default: ~/.cache/openclaw/m365-task-manager-token.json) — store that file securely or set M365_TOKEN_CACHE_PATH to a safe location; 4) confirm the M365_CLIENT_ID you supply is a public client you control/trust (no client secret is used); and 5) if you need enterprise-level auditing/consent, prefer an admin-consented service/app registration or consult your tenant admin. Overall the package is internally coherent and consistent with its stated purpose.

Type: OpenClaw Skill Name: openclaw-skill-m365-task-manager-by-altf1be Version: 0.1.2 The OpenClaw skill bundle is classified as benign. The `SKILL.md` provides clear, non-manipulative instructions for the AI agent and user. The `scripts/format-task-name.sh` is a simple, safe shell script for string formatting. The core logic in `scripts/m365-todo.mjs` uses official Microsoft authentication libraries (`@azure/msal-node`) to interact with the Microsoft Graph API for To Do tasks. It handles token caching in a standard user-specific cache directory (`~/.cache/openclaw/m365-task-manager-token.json`) and validates inputs where appropriate (e.g., date formats, resolving list IDs from the API). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent.