ms365-tenant-manager
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate administration tools for Microsoft 365. It uses official Microsoft PowerShell modules and provides guidance on security best practices like using report-only mode for policies and avoiding hardcoded secrets.
- [COMMAND_EXECUTION]: The skill provides PowerShell scripts for tenant management. These scripts require high-level permissions (Global Administrator), which is appropriate for the skill's stated purpose of Microsoft 365 tenant administration.
- [SAFE]: The skill automates user creation by ingesting data from CSV files. Ingestion points: User data is read from CSV files as documented in SKILL.md and handled in scripts/user_management.py. Boundary markers: No explicit delimiters or boundary markers are utilized in the generated PowerShell snippets. Capability inventory: The skill generates commands to create and modify users, assign licenses, and manage groups via the Microsoft Graph API. Sanitization: The Python logic in scripts/user_management.py includes a validate_user_data method that performs checks for required fields and basic format validation before generating administrative scripts.
Audit Metadata