Security Audit

microsoft-teams-automation

github.com/sickn33/antigravity-awesome-skills

AI SkillCommit e36d6fd3b3f6

TRUSTED

Scanned about 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

microsoft-teams-automation received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.

SkillShield's automated analysis identified 1 finding: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Broad Microsoft Teams Management Capabilities.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on February 20, 2026 (commit e36d6fd3). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

100%

Dependency Graph

100%

LLM Behavioral Safety

93%

Behavioral Risk Signals

Excessive Permissions

1 finding

Security Findings1

Severity	Finding	Layer	Location
MEDIUM	Broad Microsoft Teams Management Capabilities The skill exposes a wide range of powerful Microsoft Teams management tools, including `MICROSOFT_TEAMS_ADD_MEMBER_TO_TEAM`, `MICROSOFT_TEAMS_TEAMS_CREATE_CHANNEL`, `MICROSOFT_TEAMS_TEAMS_POST_CHANNEL_MESSAGE`, and `MICROSOFT_TEAMS_SEARCH_MESSAGES`. While these tools are necessary for the skill's stated purpose of 'Microsoft Teams Automation', an unconstrained LLM using this skill could potentially perform sensitive actions such as adding unauthorized users to teams, creating channels, sending messages, or listing sensitive organizational data. The skill itself does not define permissions, but by exposing these capabilities, it enables potential misuse if the LLM's access and prompts are not carefully controlled. Implement strict access controls and prompt validation for the LLM when using this skill. Ensure the underlying Rube MCP connection has the principle of least privilege applied, granting only the necessary Microsoft Graph permissions. Consider breaking down the skill into more granular sub-skills if specific powerful actions require tighter control.	LLM	SKILL.md:100

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/1c0188df751c4703.svg)](https://skillshield.io/report/1c0188df751c4703)