outlook-delegate
Enables AI assistants to manage Outlook emails and calendars as a delegate, enhancing productivity and collaboration.
Install this skill
or
76/100
Security score
The outlook-delegate skill was audited on Feb 16, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 30
Access to hidden dotfiles in home directory
SourceSKILL.md
| 30 | ### Config File: `~/.outlook-mcp/config.json` |
medium line 196
Access to hidden dotfiles in home directory
SourceSKILL.md
| 196 | 2. **Token Storage**: Credentials stored in `~/.outlook-mcp/` - protect this directory |
medium line 202
Access to hidden dotfiles in home directory
SourceSKILL.md
| 202 | - `~/.outlook-mcp/config.json` - Client ID, secret, and owner/delegate emails |
medium line 203
Access to hidden dotfiles in home directory
SourceSKILL.md
| 203 | - `~/.outlook-mcp/credentials.json` - OAuth tokens (access + refresh) |
low line 3
External URL reference
SourceSKILL.md
| 3 | description: Read, search, and manage Outlook emails and calendar via Microsoft Graph API with delegate support. Your AI assistant authenticates as itself but accesses the owner's mailbox/calendar as |
low line 135
External URL reference
SourceSKILL.md
| 135 | API="https://graph.microsoft.com/v1.0/me" |
low line 139
External URL reference
SourceSKILL.md
| 139 | API="https://graph.microsoft.com/v1.0/users/$OWNER" |
low line 214
External URL reference
SourceSKILL.md
| 214 | - Based on outlook v1.3.0 by jotamed (https://clawhub.ai/jotamed/outlook) |
Scanned on Feb 16, 2026
View Security Dashboard