Skip to main content

M365 Agent Developer

Guides users in managing Microsoft 365 Copilot agents using the Agents Toolkit CLI for project setup, deployment, and lifecycle management.

Install this skill

or
78/100

Security score

The M365 Agent Developer skill was audited on Feb 12, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 3

Access to .env file

SourceSKILL.md
3description: Expert in project scaffolding and lifecycle management for Microsoft 365 Copilot agents using the Agents Toolkit (ATK) CLI. **ALWAYS USE FIRST** when starting new agent projects. Use when
low line 109

Access to .env file

SourceSKILL.md
109grep -q "AGENT_SCOPE=shared" env/.env.dev && grep -q "M365_TITLE_ID=" env/.env.dev && echo "⚠️ VERSION BUMP REQUIRED"
low line 154

Access to .env file

SourceSKILL.md
154- Environment file updated: env/.env.dev
low line 188

Access to .env file

SourceSKILL.md
188.env.local # Local development
low line 189

Access to .env file

SourceSKILL.md
189.env.dev # Development environment
low line 190

Access to .env file

SourceSKILL.md
190.env.staging # Staging environment
low line 191

Access to .env file

SourceSKILL.md
191.env.prod # Production environment
medium line 227

Access to .env file

SourceSKILL.md
227- **Environment Not Provisioned**: Check that `env/.env.{environment}` exists with M365_TITLE_ID
medium line 254

Access to .env file

SourceSKILL.md
254Always read `env/.env.{environment}` to verify `AGENT_SCOPE=shared` before suggesting share commands.
low line 175

External URL reference

SourceSKILL.md
175🔗 [Open in Microsoft 365 Copilot](https://m365.cloud.microsoft/chat/?titleId=U_abc123xyz)
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →