add-sharepoint
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Authentication and Credential Management]: The skill includes instructions and scripts for using the Azure CLI (
az account get-access-token) to retrieve authentication tokens. This is a standard approach for developer-oriented tools to leverage existing authenticated sessions for Microsoft services. - [Interactions with Well-Known Services]: The scripts perform network operations targeting the Microsoft Graph API (
graph.microsoft.com) and SharePoint domains (sharepoint.com). These are established endpoints for the intended service management and represent normal integration with the vendor's ecosystem. - [Indirect Prompt Injection Considerations]: The skill processes external data, including SharePoint site URLs, list names, and column schemas, to perform its operations. While processing such data is inherent to managing external data sources, it establishes a surface where metadata from the external environment could influence agent behavior.
- [Administrative Command Execution]: The reference material provides PowerShell functions for querying and modifying SharePoint resources. These commands are used as intended for list management, schema discovery, and data source binding.
Audit Metadata