m365-agents-ts
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Verified Vendor Dependencies: The skill utilizes official Node.js packages from the @microsoft scope, including @microsoft/agents-hosting and @microsoft/agents-copilotstudio-client. These are standard resources for the intended Microsoft 365 integration.
- Input Ingestion Surface: The skill defines handlers that process user-supplied text from conversation activities. While this represents an ingestion point for untrusted data, the skill demonstrates best practices by using specific message triggers and structured routing.
- Secure Secret Handling: The documentation and code examples utilize environment variables for sensitive information such as API keys and client secrets, adhering to industry-standard security practices for credential management.
- Trusted Documentation Sources: All external links provided for reference point to official Microsoft documentation and verified GitHub repositories, ensuring that developers are directed to authoritative and safe resources.
Audit Metadata