mcp-create-declarative-agent
Creates a declarative agent for Microsoft 365 Copilot, integrating with an MCP server for enhanced functionality and tool selection.
Install this skill
or
79/100
Security score
The mcp-create-declarative-agent skill was audited on Feb 28, 2026 and we found 13 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 90
Template literal with variable interpolation in command context
SourceSKILL.md
| 90 | ```json |
medium line 161
Template literal with variable interpolation in command context
SourceSKILL.md
| 161 | ```json |
low line 202
Access to .env file
SourceSKILL.md
| 202 | Create `.env.local` or `.env.dev` for credentials: |
low line 287
Access to .env file
SourceSKILL.md
| 287 | - .env.local template |
low line 67
External URL reference
SourceSKILL.md
| 67 | "$schema": "https://aka.ms/json-schemas/copilot/declarative-agent/v1.0/schema.json", |
low line 77
External URL reference
SourceSKILL.md
| 77 | "url": "https://learn.microsoft.com" |
low line 124
External URL reference
SourceSKILL.md
| 124 | "url": "https://api.service.com/mcp/" |
low line 139
External URL reference
SourceSKILL.md
| 139 | "serverUrl": "https://api.service.com/mcp/", |
low line 165
External URL reference
SourceSKILL.md
| 165 | "authorization_url": "https://auth.service.com/authorize", |
low line 215
External URL reference
SourceSKILL.md
| 215 | 3. Test in Microsoft 365 Copilot at https://m365.cloud.microsoft/chat |
low line 256
External URL reference
SourceSKILL.md
| 256 | URL: https://api.githubcopilot.com/mcp/ |
low line 263
External URL reference
SourceSKILL.md
| 263 | URL: https://your-domain.atlassian.net/mcp/ |
low line 270
External URL reference
SourceSKILL.md
| 270 | URL: https://api.your-service.com/mcp/ |
Scanned on Feb 28, 2026
View Security Dashboard