Microsoft 365 agent skills, page 2

A skill your agent uses when: setting up shared local vscuse prerequisites, credentials, runner, local or pinned published Docker images, local VSIX, env variables, and common rules for Microsoft…

OfficeDev/microsoft-365-agents-toolkit

Check PnP PowerShell cmdlet parameter surfaces in C against their documentation/.md platyPS metadata - types, parameter sets, mandatory, position, pipeline binding, aliases - plus missing or…

pnp/powershell

Microsoft 365 tenant administration for Global Administrators.

alirezarezvani/claude-skills

Develops and administers SAP Build Work Zone, advanced edition digital workplace solutions.

secondsky/sap-skills

Reviews changes to PnP PowerShell, a .NET 8 module of 800+ cmdlets for Microsoft 365.

pnp/powershell

Interactive meeting preparation — builds a relationship brief and talking points before a call.

silverstein/minutes

Detect and block spearphishing emails that use personalized, researched content to evade generic spam filters, by configuring email security gateway (SEG) impersonation protection, URL rewriting…

mukul975/Anthropic-Cybersecurity-Skills

Comprehensive Microsoft 365 tenant administration skill for setup, configuration, user management, security policies, and organizational structure optimization for Global Administrators

alirezarezvani/claude-code-skill-factory

Respond to phishing incidents by analyzing reported emails, extracting indicators, sandboxing URLs/attachments, assessing credential compromise, quarantining malicious messages organization-wide…

mukul975/Anthropic-Cybersecurity-Skills

Hunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics using KQL to fingerprint offensive Entra ID enumeration tools such as ROADtools, AADInternals, and…

mukul975/Anthropic-Cybersecurity-Skills

Detect and respond to OAuth token theft and replay in Microsoft Entra ID (Azure AD), covering access token theft, refresh token replay, Primary Refresh Token (PRT) abuse, pass-the-cookie attacks…

mukul975/Anthropic-Cybersecurity-Skills

Secures SaaS apps (Microsoft 365, Google Workspace, Salesforce, Slack) via CASB/SSPM deployment, conditional access policies, OAuth app governance, and session-level DLP controls enforcing identity…

mukul975/Anthropic-Cybersecurity-Skills

Investigates phishing email incidents from initial user report through header analysis, URL/attachment detonation, impacted user identification, and containment actions using SOC tools like Splunk…

mukul975/Anthropic-Cybersecurity-Skills

Read, search, and draft email in the connected mailbox (Gmail or Microsoft 365).

heypinchy/pinchy

Generate email threat protection reports and assess email security posture.

SCStelz/security-investigator

Set up the Datadog Azure integration with Terraform - creates an Entra ID app registration and service principal, assigns Monitoring Reader across the chosen subscriptions and management groups…

datadog-labs/agent-skills

Send and read emails, manage calendar events, and access contacts via Microsoft Graph API for Outlook/M365.

hewi333/Mom-n-Pop-Skills

Connect to 100+ APIs (Google Workspace, Microsoft 365, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth.

CraftOS-dev/CraftBot

Implement a phishing report button (Microsoft 365 built-in Report button or third-party like KnowBe4/Cofense) in email clients with a SOAR-driven automated triage workflow that classifies reported…

mukul975/Anthropic-Cybersecurity-Skills

Deploys and configures Mimecast Targeted Threat Protection (TTP) modules -- URL Protect (click-time URL rewriting/analysis), Attachment Protect (sandbox detonation), Impersonation Protect…

mukul975/Anthropic-Cybersecurity-Skills

Detect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens, correlating Azure…

mukul975/Anthropic-Cybersecurity-Skills

Auditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest…

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised O365 and Google Workspace email accounts by analyzing Unified Audit Logs and Azure AD sign-in logs for impossible travel, inbox rule creation/deletion (Set-InboxRule…

mukul975/Anthropic-Cybersecurity-Skills

UiPath Activity Migrator — migrate Windows-Legacy RPA projects (targetFramework: Legacy, classic ui: activities) to the Windows framework and rewrite UiPath's own classic activities into their…

UiPath/skills

Parse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.

mukul975/Anthropic-Cybersecurity-Skills

Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation…

mukul975/Anthropic-Cybersecurity-Skills

Detect risky OAuth application consent grants in Azure AD / Microsoft Entra ID using Microsoft Graph API, audit logs, and permission analysis to identify illicit consent grant attacks.

mukul975/Anthropic-Cybersecurity-Skills

Read/write OneNote pages via Microsoft Graph or COM. An agent skill from taracodlabs/aiden.

taracodlabs/aiden

Outlook calendar + inbox via PowerShell COM or Microsoft Graph

taracodlabs/aiden

Microsoft Teams API integration with managed OAuth. An agent skill from CraftOS-dev/CraftBot.

CraftOS-dev/CraftBot

Microsoft 365 / Entra ID attack - tenant discovery, user enumeration via OneDrive differential (2026 verified), AADSTS code reference, Smart Lockout math (hard cap 1-2 attempts/user), ROPC…

Encod3d-Sec/TORCH

Guidance for selecting the right Azure RBAC role with least privilege - mapping required actions to built-in roles, deciding when a custom role is needed, scoping assignments correctly, and choosing…

vinayaklatthe/microsoft-security-skills

Creates accessible, single-file HTML artifacts that render reliably in SharePoint, OneDrive, Teams, File Viewer, and embedded iframe preview surfaces.

pnp/sharepoint-skills

Investigate security incidents in Microsoft 365 and Entra ID (Azure AD) -- search the Unified Audit Log, correlate sign-in and audit events, trace illicit OAuth consent grants, analyze mailbox rule…

trilwu/secskills

Classify Microsoft Graph OneNote failures from redacted response evidence and choose a bounded recovery path.

jeremylongshore/tons-of-skills-marketplace

Deploy a OneNote integration with delegated-user lifecycle, environment isolation, staged rollout, and rollback evidence.

jeremylongshore/tons-of-skills-marketplace

Establish a least-privilege delegated Microsoft Graph connection for OneNote with tested consent and lifecycle controls.

jeremylongshore/tons-of-skills-marketplace

Build a testable Microsoft Graph OneNote client boundary with delegated auth, opaque pagination, HTML operations, errors, and throttling.

jeremylongshore/tons-of-skills-marketplace

Microsoft 365 tenant administration for Global Administrators.

borghei/Claude-Skills

Sentinel Ingestion Report — YAML-driven PowerShell pipeline gathers all data via az monitor/az rest/Graph API, writes a deterministic scratchpad, LLM renders the report.

SCStelz/security-investigator

The first Outlook calendar CLI built for AI agents on personal Microsoft 365 accounts — with offline conflict...

mvanhorn/printing-press-library

Drive your personal Microsoft 365 inbox from agents — read, send, sync, and run offline triage analytics that...

mvanhorn/printing-press-library

Calendar + video provider integrations — Google Calendar, Office 365, Zoom, built-in video, Google Meet — and how to write new ones.

BuilderIO/agent-native

This skill should be used when the user asks to "read my emails", "send an email", "compose email", "check my calendar", "get calendar events", "create a meeting", "schedule an event", "add calendar…

aiskillstore/marketplace

OneNote API integration with managed OAuth via Microsoft Graph.

LeoYeAI/openclaw-master-skills

Read OneDrive and SharePoint files via the Microsoft 365 MCP server — list folder contents, fetch item metadata, inspect versions and sharing permissions.

automateyournetwork/netclaw

Upload and retrieve Visio (.vsdx) and other diagram files in OneDrive/SharePoint via the Microsoft 365 MCP server.

automateyournetwork/netclaw

Read Microsoft 365 data through Microsoft Graph: Outlook mail/calendar, OneDrive/SharePoint files, Teams, chats, and user profile.

HybridAIOne/hybridclaw