Skip to main content

outlook

Enables management of Outlook emails and calendar through Microsoft Graph API, facilitating email handling and scheduling.

Install this skill

or
74/100

Security score

The outlook skill was audited on Feb 28, 2026 and we found 6 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 7

Access to hidden dotfiles in home directory

SourceSKILL.md
7metadata: {"clawdbot":{"requires":{"bins":["az","jq"]},"credentials":{"note":"Setup creates Azure App Registration and stores client_id/client_secret/OAuth tokens in ~/.outlook-mcp. The token script c
medium line 26

Access to hidden dotfiles in home directory

SourceSKILL.md
265. Save credentials to `~/.outlook-mcp/`
low line 62

Access to hidden dotfiles in home directory

SourceSKILL.md
62~/.outlook-mcp/
medium line 237

Access to hidden dotfiles in home directory

SourceSKILL.md
237- `~/.outlook-mcp/config.json` - Client ID and secret
medium line 238

Access to hidden dotfiles in home directory

SourceSKILL.md
238- `~/.outlook-mcp/credentials.json` - OAuth tokens (access + refresh)
medium line 276

Access to hidden dotfiles in home directory

SourceSKILL.md
276- **Local credential storage**: Client ID, client secret, and OAuth tokens are stored in `~/.outlook-mcp/` with `chmod 600`
Scanned on Feb 28, 2026
View Security Dashboard
Installation guide →