onedrive
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or commands.
- [EXTERNAL_DOWNLOADS]: The skill interacts with the well-known Microsoft Graph API domain (
graph.microsoft.com) to manage cloud storage. This is consistent with the skill's stated purpose. - [DATA_EXPOSURE_AND_EXFILTRATION]: Secure handling of credentials is demonstrated by referencing environment variables (
MICROSOFT_ACCESS_TOKEN) rather than using hardcoded secrets. Standard placeholders are used for documentation purposes. - [INDIRECT_PROMPT_INJECTION]: While the skill can download content from external sources (OneDrive), this is a core functional requirement of a cloud storage manager. User context and standard safety guardrails apply during the processing of downloaded data.
Audit Metadata