microsoft-todo
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates exclusively with official Microsoft Graph API endpoints at
graph.microsoft.comto perform task management operations. - [SAFE]: Authentication is handled via standard OAuth 2.0 bearer tokens. The skill supports Zapier-managed connections as well as direct environment-variable-based authentication for access tokens.
- [SAFE]: User input used in OData filters (such as task titles in
findTask.ts) is sanitized by escaping single quotes, preventing OData injection vulnerabilities. - [SAFE]: The project structure uses a standard wrapper (
cli.js) to manage runtime execution and dependency validation without introducing dangerous persistence or privilege escalation mechanisms.
Audit Metadata