microsoft-teams

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s Teams-management purpose matches its capabilities, and there is no malware-like installer or hidden execution. However, all Microsoft Graph access and sensitive collaboration data are routed through Maton-controlled gateway services rather than directly to Microsoft, creating a third-party interception and trust risk that is higher than a normal direct API integration.

Confidence: 87%Severity: 66%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:52 PM
Package URL
pkg:socket/skills-sh/craftos-dev%2Fcraftbot%2Fmicrosoft-teams%2F@9c3e96bffaba1fe1973c06b0ff5864076dc6c328e0c360dd055b7ebd9b683666
Security Audit — socket — microsoft-teams