m365-sharepoint
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform administrative operations via them365CLI utility. - It facilitates tasks such as creating SharePoint sites, managing lists, modifying permissions, and handling files.
- A safety mechanism is integrated, instructing the agent to always request user confirmation before executing destructive commands such as
m365 spo file removeorm365 spo listitem remove. - [EXTERNAL_DOWNLOADS]: The skill's prerequisite documentation references the installation of the
@pnp/cli-microsoft365tool through the Node Package Manager (NPM). - This tool is a recognized open-source CLI for Microsoft 365 management.
- [PROMPT_INJECTION]: The skill presents an inherent surface for indirect prompt injection due to its core function of reading and processing data from external SharePoint sources.
- Ingestion points: Data is retrieved via
m365 spo file get,m365 spo listitem list, and search operations defined in bothSKILL.mdandreferences/advanced-commands.md. - Boundary markers: There are no explicit markers or instruction delimiters used to distinguish external data from the agent's internal execution context.
- Capability inventory: The agent possesses the capability to modify the file system and SharePoint resources using the
Bashtool. - Sanitization: The skill does not provide specific instructions for sanitizing or validating the content retrieved from SharePoint before it is interpreted by the agent.
Audit Metadata