onedrive
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and run the@useclawlink/clipackage from the npm registry. This is the official CLI provided by the vendor for managing the OneDrive integration. - [COMMAND_EXECUTION]: The skill relies on shell command execution via the ClawLink CLI to perform all tasks, including authentication and interacting with the Microsoft OneDrive API.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Microsoft OneDrive, creating a potential surface for indirect prompt injection attacks. 1. Ingestion points: File metadata, search results, and file contents retrieved from OneDrive folders (SKILL.md). 2. Boundary markers: The skill does not define specific delimiters to separate untrusted data from instructions. 3. Capability inventory: The skill can execute shell commands and perform file operations using the ClawLink CLI (SKILL.md). 4. Sanitization: No sanitization or filtering of retrieved data is described.
Audit Metadata