Outlook for Work/School 365

Read, search, and manage Outlook emails and calendar via Microsoft Graph API. Use when the user asks about emails, inbox, Outlook, Microsoft mail, calendar e...

This skill appears to do what it says, but be aware of these practical security points before installing: 1) The automated setup will create an Azure App Registration and a client secret in the authenticated Azure account/tenant — that requires appropriate privileges and may require admin consent for some tenants. 2) The client_secret and OAuth tokens are stored on disk at ~/.outlook-mcp/config.json and credentials.json; anyone with access to those files could use them to access your mailbox until you revoke them. 3) If you prefer tighter control, perform the manual setup (references/setup.md) and create the app yourself in the Azure Portal, then paste only the minimal config into ~/.outlook-mcp. 4) After use, revoke the app secret or delete the App Registration and remove ~/.outlook-mcp to invalidate access. 5) Inspect the included scripts (they are plain shell) before running and ensure az, jq, and curl are trusted on your system.

Type: OpenClaw Skill Name: outlook-365 Version: 1.0.0 The skill bundle contains critical shell injection vulnerabilities in 'outlook-mail.sh' and 'outlook-calendar.sh' because unsanitized variables (such as $SUBJECT, $BODY, and $QUERY) are used within double-quoted strings in curl commands, which allows for Remote Code Execution (RCE) if the agent processes untrusted input. Additionally, the 'download' command in 'outlook-mail.sh' is vulnerable to path traversal through the attachment name. While the scripts are functionally aligned with their stated purpose of managing Microsoft Outlook data, these significant security flaws and the broad API permissions required (Mail.ReadWrite, Calendars.ReadWrite) present a high risk to the host environment.