m365-sharepoint

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform administrative operations via the m365 CLI utility.
  • It facilitates tasks such as creating SharePoint sites, managing lists, modifying permissions, and handling files.
  • A safety mechanism is integrated, instructing the agent to always request user confirmation before executing destructive commands such as m365 spo file remove or m365 spo listitem remove.
  • [EXTERNAL_DOWNLOADS]: The skill's prerequisite documentation references the installation of the @pnp/cli-microsoft365 tool through the Node Package Manager (NPM).
  • This tool is a recognized open-source CLI for Microsoft 365 management.
  • [PROMPT_INJECTION]: The skill presents an inherent surface for indirect prompt injection due to its core function of reading and processing data from external SharePoint sources.
  • Ingestion points: Data is retrieved via m365 spo file get, m365 spo listitem list, and search operations defined in both SKILL.md and references/advanced-commands.md.
  • Boundary markers: There are no explicit markers or instruction delimiters used to distinguish external data from the agent's internal execution context.
  • Capability inventory: The agent possesses the capability to modify the file system and SharePoint resources using the Bash tool.
  • Sanitization: The skill does not provide specific instructions for sanitizing or validating the content retrieved from SharePoint before it is interpreted by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 04:24 AM
Security Audit — agent-trust-hub — m365-sharepoint