The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The file references/api-reference.md contains references to blacklisted domains suspicious-domain.xyz and suspicious-domain.xyz/login. While these appear in documentation as examples for testing phishing detection with Microsoft Defender and VirusTotal, they are active entries on malicious URL blacklists.
[DATA_EXFILTRATION]: The scripts scripts/agent.py and scripts/process.py are designed to extract metadata from .eml files, including the sender's email address and the email subject. This information is included in plaintext reports, which could lead to the exposure of sensitive communication details if the reports are not properly secured.
[EXTERNAL_DOWNLOADS]: The skill facilitates communication with well-known security platforms, including Microsoft Graph (graph.microsoft.com) and VirusTotal (virustotal.com), to perform legitimate URL reputation and threat intelligence queries.

detecting-qr-code-phishing-with-email-security