CLI Microsoft365 Script
pnp/cli-microsoft365-mcp-server
Write PowerShell scripts using CLI for Microsoft 365 commands to automate Microsoft 365 management tasks.
The conventions a PnP PowerShell cmdlet must satisfy - base class selection, permission attributes, PipeBinds, parameter validation, Graph and CSOM call patterns, and the documentation plus…
$ npx skills add pnp/powershell --skill new-cmdlet -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install pnp/powershell new-cmdlet --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/pnp/powershell.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/new-cmdlet .claude/skills/new-cmdlet && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "new-cmdlet" agent skill from https://github.com/pnp/powershell/tree/dev/.agents/skills/new-cmdlet into .claude/skills/new-cmdlet/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "new-cmdlet", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/pnp/powershell/tree/dev/.agents/skills/new-cmdletType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add pnp/powershell --skill new-cmdlet -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install pnp/powershell new-cmdlet --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/pnp/powershell.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/new-cmdlet .agents/skills/new-cmdlet && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "new-cmdlet" agent skill from https://github.com/pnp/powershell/tree/dev/.agents/skills/new-cmdlet into .agents/skills/new-cmdlet/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "new-cmdlet", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add pnp/powershell --skill new-cmdlet -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install pnp/powershell new-cmdlet --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/pnp/powershell.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/new-cmdlet .cursor/skills/new-cmdlet && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "new-cmdlet" agent skill from https://github.com/pnp/powershell/tree/dev/.agents/skills/new-cmdlet into .cursor/skills/new-cmdlet/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "new-cmdlet", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/pnp/powershell.git --path .agents/skills/new-cmdlet--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add pnp/powershell --skill new-cmdlet -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install pnp/powershell new-cmdlet --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/pnp/powershell.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/new-cmdlet .gemini/skills/new-cmdlet && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "new-cmdlet" agent skill from https://github.com/pnp/powershell/tree/dev/.agents/skills/new-cmdlet into .gemini/skills/new-cmdlet/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "new-cmdlet", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install pnp/powershell new-cmdletInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add pnp/powershell --skill new-cmdlet -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/pnp/powershell.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/new-cmdlet .github/skills/new-cmdlet && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "new-cmdlet" agent skill from https://github.com/pnp/powershell/tree/dev/.agents/skills/new-cmdlet into .github/skills/new-cmdlet/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "new-cmdlet", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add pnp/powershell --skill new-cmdlet -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install pnp/powershell new-cmdlet --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/pnp/powershell.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/new-cmdlet .opencode/skills/new-cmdlet && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "new-cmdlet" agent skill from https://github.com/pnp/powershell/tree/dev/.agents/skills/new-cmdlet into .opencode/skills/new-cmdlet/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "new-cmdlet", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
new-cmdletThe conventions a PnP PowerShell cmdlet must satisfy - base class selection, permission attributes, PipeBinds, parameter validation, Graph and CSOM call patterns, and the documentation plus…
New Cmdlet is an agent skill from pnp/powershell. The conventions a PnP PowerShell cmdlet must satisfy - base class selection, permission attributes, PipeBinds, parameter validation, Graph and CSOM call patterns, and the documentation plus changelog artefacts that make a cmdlet complete. Use when writing, modifying or reviewing cmdlet code, or when deciding which base class or permission attribute applies.
Its SKILL.md is about 1.6k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Development, covering Changelog and release notes. It works with PowerShell, Microsoft 365 and Microsoft SharePoint. The licence is MIT.
5 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit 947ac5e. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
dotnetFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
New Cmdlet loads about 1.6k tokens when it runs. Until then it costs about 93 tokens; SKILL.md has 531 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from pnp/powershell at commit 947ac5e, republished under its MIT licence (© pnp). 531 words, ~1,635 tokens.
.claude/skills/new-cmdlet/SKILL.md (or your agent's skills folder).The conventions a cmdlet in this repository must satisfy. A reference — read it before writing or
reviewing cmdlet code. For the step-by-step generation procedure see
cmdlet-scaffolder; for language-level rules see
dotnet-standards.
It determines the connection, the resource, the permission flavour and which helpers exist.
| Base class | Use for | Gives you |
|---|---|---|
PnPWebCmdlet | Operations on the connected site/web | CurrentWeb, ClientContext |
PnPWebRetrievalsCmdlet<T> | The above, returning objects with selectable properties | RetrievalExpressions, -Includes |
PnPSharePointCmdlet | General SharePoint, no web context needed | ClientContext |
PnPSharePointOnlineAdminCmdlet | Tenant admin operations | Tenant, AdminContext |
PnPGraphCmdlet | Microsoft Graph | Connection, AccessToken, GraphRequestHelper |
PnPAzureManagementApiCmdlet | Azure Management API | |
PnPOfficeManagementApiCmdlet | Office 365 Management API | |
PnPGcsCmdlet, PnPTasksCmdlet | Consumer storage, Planner/Tasks | |
PnPConnectedCmdlet | Needs a connection, none of the above | |
BasePSCmdlet | No connection at all |
Choosing wrong is a real defect: a tenant-admin operation on PnPWebCmdlet will use the wrong
context and fail confusingly in someone's tenant.
using System.Management.Automation;
using PnP.PowerShell.Commands.Attributes;
using PnP.PowerShell.Commands.Base;
using PnP.PowerShell.Commands.Base.PipeBinds;
namespace PnP.PowerShell.Commands.FeatureArea
{
[Cmdlet(VerbsCommon.Get, "PnPSomething")]
[OutputType(typeof(SomeType))]
[RequiredApiDelegatedPermissions("sharepoint/AllSites.Read")]
[RequiredApiApplicationPermissions("sharepoint/Sites.Read.All")]
public class GetSomething : PnPWebRetrievalsCmdlet<SomeType>
{
[Parameter(Mandatory = false, ValueFromPipeline = true, Position = 0)]
[ValidateNotNull]
public SomePipeBind Identity { get; set; }
protected override void ExecuteCmdlet()
{
// ...
WriteObject(result, true);
}
}
}src/Commands/Lists/ → PnP.PowerShell.Commands.Lists.ExecuteCmdlet(), never ProcessRecord() — the base class owns connection handling and
error translation.[Alias("Old-PnPName")] for backward compatibility."<resource>/<scope>". Multiple attributes are ORed; multiple scopes inside one attribute are ANDed.
[RequiredApiDelegatedPermissions("sharepoint/AllSites.FullControl", "sharepoint/User.ReadWrite.All")]
[RequiredApiApplicationPermissions("sharepoint/Sites.FullControl.All", "sharepoint/User.ReadWrite.All")]Also available: RequiredApiDelegatedOrApplicationPermissions,
ApiNotAvailableUnderDelegatedPermissions, ApiNotAvailableUnderApplicationPermissions,
ApiPermissionsNotRequired, ApiPermissionsDependOnResource.
An unrecognised resource prefix is silently treated as SharePoint.
TokenHandler.DefineResourceTypeFromAudience defaults every audience it does not recognise to
SharePoint (only blank input becomes Unknown), so "garph/Group.Read.All" declares a SharePoint
Group.Read.All rather than failing. A string with no / at all fails the regex and is dropped.
Declare least privilege, and verify the scope against Microsoft Learn rather than from memory. See
permissions-auditor.
SharePoint retrievals
DefaultRetrievalExpressions = [l => l.Id, l => l.Title, l => l.RootFolder.ServerRelativeUrl];
var list = Identity.GetList(CurrentWeb);
list?.EnsureProperties(RetrievalExpressions);
WriteObject(list);Graph
var result = GraphRequestHelper.GetResultCollection<SomeType>(this, "v1.0/groups?$select=id,displayName");
WriteObject(result, true);Use GetResultCollection for collections — it follows @odata.nextLink. Get returns the first
page only. Match the signature of a neighbouring cmdlet in the same folder; these helpers have
evolved and older call shapes still exist in the tree.
CSOM — always ExecuteQueryRetry(), never ExecuteQuery().
A cmdlet is not finished until all of these exist in the same PR:
[Cmdlet], [OutputType], permission attributes, [Alias] if
renaming.Mandatory/Position/pipeline
binding; ParameterSpecified where a default is meaningful.documentation/<Verb-PnPNoun>.md — full platyPS page: front matter, ## SYNOPSIS — carrying
a Required Permissions block only when the cmdlet declares API permissions; a cmdlet
marked ApiPermissionsNotRequired must not have one, and none of the ten such pages does —
## SYNTAX (one block per parameter set), ## DESCRIPTION,
## EXAMPLES (at least one, ```powershell fenced, each with a sentence of explanation),
## PARAMETERS **alphabetical, YAML blocks only**, including the standard -Connection and
-Verbose sections, then ## RELATED LINKS. Copy the structure from a sibling page.CHANGELOG.md — a line under [Current nightly] → Added / Changed / Fixed /
Removed, naming the cmdlets in backticks and linking the PR or issue.dotnet build src/PnP.PowerShell.sln, no new warnings.Removing a cmdlet means deleting its documentation page too.
"In the same PR" means the same working tree. Never commit, push, or open the PR yourself — see Human in the loop.
You cannot run the cmdlet. Anything calling an API you have not invoked is a draft: say which API shapes, response fields and permission scopes you inferred rather than verified, so a maintainer knows exactly what to check against a tenant.
© pnp, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in .agents/skills/new-cmdlet of pnp/powershell.
Open the folder on GitHubat commit 947ac5e
New Cmdlet next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| New Cmdlet this skillpnp/powershell | 905 | — | ~1.6k | Automated safety check: Pass | MIT | |
| CLI Microsoft365 Scriptpnp/cli-microsoft365-mcp-server | 131 | — | ~3.3k | Automated safety check: Pass | MIT | |
| Release PreparationMichaelGrafnetter/DSInternals | 2k | — | ~752 | Automated safety check: Pass | MIT | |
| Validate Release-Note Code Samplesdotnet/core | 22k | — | ~1.4k | Automated safety check: Pass | MIT | |
| Entra Agent Idmicrosoft/GitHub-Copilot-for-Azure | 255 | 3 repos | ~4k | Automated safety check: Pass | MIT | |
| CLI Microsoft365pnp/cli-microsoft365-mcp-server | 131 | — | ~3.5k | Automated safety check: Pass | MIT |
pnp/cli-microsoft365-mcp-server
Write PowerShell scripts using CLI for Microsoft 365 commands to automate Microsoft 365 management tasks.
MichaelGrafnetter/DSInternals
Prepare the DSInternals project for a new release by updating version numbers, release notes, and changelog.
dotnet/core
Builds and runs the code snippets behind .NET release-note features against the exact milestone SDK, and records what must change to move maintained samples to a new preview.
microsoft/GitHub-Copilot-for-Azure
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmipath, OBO, cross-tenant)…
pnp/cli-microsoft365-mcp-server
Use CLI for Microsoft 365 to manage Microsoft 365 tenants from the terminal.
pnp/docker-spfx
Automate SPFx version releases - branch, update files, commit, open PR, then tag after merge
pnp/powershell
Generate a new PnP PowerShell cmdlet modelled on an existing sibling - class with the right base class and permission attributes, the documentation page, and the changelog entry.
pnp/powershell
C 12 / .NET 8 and PowerShell cmdlet design rules for this repository - naming, output and error channels, parameter validation, ShouldProcess, async, culture, cross-platform and ALC constraints.
pnp/powershell
Take a PnP PowerShell GitHub issue, find the cmdlet that owns it, trace the code path, and decide whether the cause is in this repo or in PnP Framework, PnP Core SDK or the service.
pnp/powershell
Audit PnP PowerShell permission attributes against the APIs a cmdlet actually calls and against its documentation.
pnp/powershell
Compare the public cmdlet surface of the current branch against dev - names, aliases, parameters, types, mandatory flags, parameter sets, output types, permissions - and classify each change as…
pnp/powershell
Review changes to PnP PowerShell for the failure modes this repository actually ships - silently ignored input, unpaged Graph collections, the wrong base class, permission attributes that do not…
Categories
The conventions a PnP PowerShell cmdlet must satisfy - base class selection, permission attributes, PipeBinds, parameter validation, Graph and CSOM call patterns, and the documentation plus…. New Cmdlet is an agent skill from pnp/powershell. The conventions a PnP PowerShell cmdlet must satisfy - base class selection, permission attributes, PipeBinds, parameter validation, Graph and CSOM call patterns, and the documentation plus changelog artefacts that make a cmdlet complete.
New Cmdlet fits situations like: reviewing cmdlet code; deciding which base class; permission attribute applies.
Run `npx skills add pnp/powershell --skill new-cmdlet -a claude-code`. Or copy the skill folder (.agents/skills/new-cmdlet in pnp/powershell) into .claude/skills/new-cmdlet in your project. Claude Code loads it when a task matches its description.
Run `npx skills add pnp/powershell --skill new-cmdlet -a codex`. Or copy the skill folder (.agents/skills/new-cmdlet in pnp/powershell) into .agents/skills/new-cmdlet in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add pnp/powershell --skill new-cmdlet -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/new-cmdlet, .gemini/skills/new-cmdlet, .github/skills/new-cmdlet and .opencode/skills/new-cmdlet in your project.
Going by SKILL.md and its folder, New Cmdlet needs the command-line tools its instructions call (dotnet).
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
New Cmdlet is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.6k tokens (SKILL.md is roughly 6.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with New Cmdlet: CLI Microsoft365 Script (pnp/cli-microsoft365-mcp-server, 131 stars), Release Preparation (MichaelGrafnetter/DSInternals, 2k stars), Validate Release-Note Code Samples (dotnet/core, 22k stars) and Entra Agent Id (microsoft/GitHub-Copilot-for-Azure, 255 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
pnp (a GitHub organization) maintains it in pnp/powershell, which has 905 GitHub stars. The repository holds 9 skills in this directory. The repository was last updated on October 7, 2026.
Source: pnp/powershell on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.