Msgraph
codemie-ai/codemie-code
Work with Microsoft 365 services via the Graph API — emails, calendar events, SharePoint sites (read and write), Teams chats and channel messages, OneDrive files, OneNote notebooks, Planner task…
Guidance for safely deploying Microsoft 365 Copilot — end-to-end readiness covering oversharing remediation, SharePoint Advanced Management (SAM) restricted sites and content discovery, sensitivity…
Install Copilot For M365 Readiness
$ npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills copilot-for-m365-readiness --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/copilot-for-m365-readiness .claude/skills/copilot-for-m365-readiness && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "copilot-for-m365-readiness" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/copilot-for-m365-readiness into .claude/skills/copilot-for-m365-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "copilot-for-m365-readiness", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/copilot-for-m365-readinessType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills copilot-for-m365-readiness --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/copilot-for-m365-readiness .agents/skills/copilot-for-m365-readiness && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "copilot-for-m365-readiness" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/copilot-for-m365-readiness into .agents/skills/copilot-for-m365-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "copilot-for-m365-readiness", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills copilot-for-m365-readiness --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/copilot-for-m365-readiness .cursor/skills/copilot-for-m365-readiness && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "copilot-for-m365-readiness" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/copilot-for-m365-readiness into .cursor/skills/copilot-for-m365-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "copilot-for-m365-readiness", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/vinayaklatthe/microsoft-security-skills.git --path skills/copilot-for-m365-readiness--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills copilot-for-m365-readiness --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/copilot-for-m365-readiness .gemini/skills/copilot-for-m365-readiness && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "copilot-for-m365-readiness" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/copilot-for-m365-readiness into .gemini/skills/copilot-for-m365-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "copilot-for-m365-readiness", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install vinayaklatthe/microsoft-security-skills copilot-for-m365-readinessInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/copilot-for-m365-readiness .github/skills/copilot-for-m365-readiness && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "copilot-for-m365-readiness" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/copilot-for-m365-readiness into .github/skills/copilot-for-m365-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "copilot-for-m365-readiness", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills copilot-for-m365-readiness --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/copilot-for-m365-readiness .opencode/skills/copilot-for-m365-readiness && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "copilot-for-m365-readiness" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/copilot-for-m365-readiness into .opencode/skills/copilot-for-m365-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "copilot-for-m365-readiness", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
copilot-for-m365-readiness- GitHub stars
- 175
- Token cost
- ~2.1k tokens
- SKILL.md length
- 881 words
- Files
- 1
- Skills in repo
- 50
- Repo updated
- First seen
- Licence
- MIT
At a glance
Guidance for safely deploying Microsoft 365 Copilot — end-to-end readiness covering oversharing remediation, SharePoint Advanced Management (SAM) restricted sites and content discovery, sensitivity…
- Works in 8 steps: Inventory and triage oversharing. Run… → Apply Restricted SharePoint Search (RSS)… → Roll out sensitivity labels with… → …
- Tenant-wide oversharing program design (use m365-oversharing)
- SKILL.md covers When to use, Readiness gates — don't skip, Approach and Guardrails, plus 3 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Copilot For M365 Readiness is an agent skill from vinayaklatthe/microsoft-security-skills. Guidance for safely deploying Microsoft 365 Copilot — end-to-end readiness covering oversharing remediation, SharePoint Advanced Management (SAM) restricted sites and content discovery, sensitivity label coverage, Purview DLP for Copilot, Restricted SharePoint Search (RSS) interim safeguard, site lifecycle and ownership, Copilot interaction auditing, Copilot in Defender XDR alerts, prompt-shield risks, licensing prerequisites, and a phased rollout that doesn't surface confidential data on day one. WHEN: M365…
Its SKILL.md is about 2.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Documents & Office, covering Cloud office suites. It works with Microsoft 365, Microsoft SharePoint and Microsoft Defender. The repository describes itself as: Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot. The licence is MIT.
When your agent uses it
- Tenant-wide oversharing program design (use m365-oversharing)
- Purview DSPM for AI alone (use purview-dspm-ai)
- Microsoft Foundry agent security (use microsoft-agent-365)
Example prompts
- “/copilot-for-m365-readiness”
Workflow steps
8 steps, taken from the first numbered list in SKILL.md.
- Inventory and triage oversharing. Run SAM Data Access Governance reports
- Apply Restricted SharePoint Search (RSS) as an interim safeguard. RSS limits
- Roll out sensitivity labels with mandatory labeling for the pilot population, plus
- Author DLP for Copilot policies. Specifically the Microsoft 365 Copilot
- Site lifecycle controls via SAM
- Audit and monitoring.
- Phased rollout.
- Licensing prerequisites checklist: Microsoft 365 Copilot license + Microsoft
What it can do on your machine
Read from SKILL.md and the folder at commit 15f16df. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
learn.microsoft.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Copilot For M365 Readiness loads about 2.1k tokens when it runs. Until then it costs about 248 tokens; SKILL.md has 881 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from vinayaklatthe/microsoft-security-skills at commit 15f16df, republished under its MIT licence (© vinayaklatthe). 881 words, ~2,142 tokens.
Download SKILL.mdSave it as
.claude/skills/copilot-for-m365-readiness/SKILL.md (or your agent's skills folder).- name
- copilot-for-m365-readiness
- description
- Guidance for safely deploying Microsoft 365 Copilot — end-to-end readiness covering oversharing remediation, SharePoint Advanced Management (SAM) restricted sites and content discovery, sensitivity label coverage, Purview DLP for Copilot, Restricted SharePoint Search (RSS) interim safeguard, site lifecycle and ownership, Copilot interaction auditing, Copilot in Defender XDR alerts, prompt-shield risks, licensing prerequisites, and a phased rollout that doesn't surface confidential data on day one. WHEN: M365 Copilot rollout, Copilot oversharing remediation, SAM, SharePoint Advanced Management, Restricted SharePoint Search, RSS Copilot, sensitivity labels Copilot, DLP for Copilot, Copilot audit, safe Copilot deployment, Copilot pilot, prevent Copilot data leakage. DO NOT USE for tenant-wide oversharing program design (use m365-oversharing), Purview DSPM for AI alone (use purview-dspm-ai), or Microsoft Foundry agent security (use microsoft-agent-365).
- license
- MIT
- metadata.author
- Microsoft
- metadata.version
- 0.1.0
Microsoft 365 Copilot — Safe Readiness
Microsoft 365 Copilot is only as safe as your SharePoint, OneDrive, and Teams permission hygiene. The #1 incident pattern is "Copilot surfaced HR/board/legal content because the underlying site was over-permissioned." This skill is the end-to-end readiness playbook — identify oversharing, contain via SAM and labels, then enable Copilot in waves.
When to use
Preparing to deploy Microsoft 365 Copilot. Use for the pre-launch security workstream: oversharing detection, containment controls, label/DLP coverage, audit, and phased rollout.
Do not use this skill for the broader oversharing program (m365-oversharing),
Purview DSPM for AI in isolation (purview-dspm-ai), or agent-specific security
(microsoft-agent-365).
Readiness gates — don't skip
| Gate | Why |
|---|---|
| Sensitivity labels published and adopted | Copilot honors label encryption + usage rights |
| Auto-labeling for known sensitive content classes | Catches the long tail users won't label |
| DLP for Copilot policies | Prevents sensitive content surfacing in chat answers |
| SAM (SharePoint Advanced Management) provisioned | Required for restricted access + data access governance |
| Site ownership confirmed | Orphaned sites with permissive ACLs are the #1 incident path |
| Audit on | Copilot interactions are auditable; off = no investigation possible |
Approach
Inventory and triage oversharing. Run SAM Data Access Governance reports:
- Sites shared with Everyone except external users (EEEU).
- Sites with anonymous links.
- Sites with high external sharing volume.
- Sites with sensitive content but permissive ACLs. Prioritize the top 5% by volume and sensitivity.
Apply Restricted SharePoint Search (RSS) as an interim safeguard. RSS limits Copilot grounding (and SharePoint search) to a curated allowlist of sites + the user's own OneDrive. Buys 90 days while you fix the long tail. Verify: in test tenant, Copilot prompt "summarize HR salary data" returns no grounded content from non-allowlisted sites.
Roll out sensitivity labels with mandatory labeling for the pilot population, plus auto-labeling for known sensitive info types. Labels with encryption restrict Copilot from showing content to users without usage rights.
Author DLP for Copilot policies. Specifically the Microsoft 365 Copilot location:
- Block Copilot from using sensitive-labeled content in chat responses.
- Block credit-card / SSN / financial data from appearing in Copilot output.
- Audit-mode first, block after 2 weeks of tuning.
Site lifecycle controls via SAM:
- Restricted Access Control — explicitly cap who can access a site even if other policies would grant access; useful for HR, finance, board.
- Site lifecycle policies — archive/inactive sites are excluded from Copilot grounding.
- Block download for specific sensitivity labels.
Audit and monitoring.
- Enable Purview Audit Premium for long retention.
- Stream Copilot interaction logs to Sentinel; alert on prompts with sensitive terms or attempts to access restricted content.
- Copilot incidents now show in Defender XDR — wire to SOC queue.
Phased rollout.
- Wave 0 (50 users): IT + Security; validate auditing and DLP.
- Wave 1 (500): low-sensitivity department (Marketing).
- Wave 2: broader workforce after oversharing top-5% remediated.
- Wave 3: regulated departments (Finance, Legal, HR) only after deep label coverage. Measure prompts blocked, sensitive content surfaced, and user satisfaction at each wave.
Licensing prerequisites checklist: Microsoft 365 Copilot license + Microsoft 365 E3/E5, SharePoint Advanced Management add-on for SAM features, Purview E5 for advanced DLP and Audit Premium.
Show full SKILL.md (374 more words)Show less
Guardrails
- Don't enable Copilot tenant-wide before oversharing remediation. "Day 1 Copilot surfaced last year's redundancy list" is a real headline.
- Restricted SharePoint Search is interim. It hides the problem; it doesn't fix permissions. Set a sunset date.
- Sensitivity labels without encryption don't restrict Copilot grounding. Only encrypted labels with denied EXTRACT/VIEW for the user actually prevent surfacing.
- Auto-labeling needs validation. A poorly-tuned auto-label policy can mass-encrypt the wrong content, breaking workflows.
- DLP for Copilot covers Copilot, not all AI surfaces. External AI (ChatGPT, Gemini)
needs Purview AI Hub + browser controls (see
purview-ai-hub). - Audit retention matters. Default Purview Audit retention is 180 days. Copilot incident investigations months later need Audit Premium.
- Orphaned site ownership is the silent killer. A site with no owner has no one to approve access reviews; permissions calcify.
- Copilot can't decrypt what users can't decrypt. Label-encryption + Copilot is consistent — if a user can't open a doc, Copilot can't ground on it for them.
Common anti-patterns
- "Bought Copilot licenses, enabled tenant-wide, fixed permissions later" — oversharing incidents in week one.
- "RSS forever" — Copilot is unusable because the allowlist is tiny.
- "Sensitivity labels visual-only, no encryption" — labels look right, restrict nothing.
- "DLP for Copilot in audit forever" — sensitive data flows in chat outputs; audit proves it, no prevention.
- "Site owners = 'IT helpdesk'" — no business accountability for ACLs.
- "No Sentinel/SOC integration for Copilot incidents" — invisible.
- "Pilot in Finance day 1" — highest-sensitivity audience, lowest-prepared permission model. Pilot Marketing first.
Example prompts
Build a 90-day M365 Copilot readiness plan for a 25,000-user tenant — oversharing remediation, SAM, labels, DLP, audit, phased rollout.Run SAM data access governance reports and propose a top-50 site remediation backlog.Configure Restricted SharePoint Search with an allowlist of 200 sites as an interim Copilot safeguard.Author DLP for Copilot policies that block confidential-labeled content from Copilot output.Wire Copilot interaction audit logs to Sentinel with detections for sensitive-term prompts.Pilot wave plan: who, when, success criteria, rollback triggers.Audit and Defender XDR integration for Copilot incidents — runbook for analysts.
Microsoft Learn
- Copilot readiness overview: https://learn.microsoft.com/microsoft-365-copilot/microsoft-365-copilot-overview
- Data, privacy, security: https://learn.microsoft.com/copilot/microsoft-365/microsoft-365-copilot-privacy
- Restricted SharePoint Search: https://learn.microsoft.com/sharepoint/restricted-sharepoint-search
- SharePoint Advanced Management: https://learn.microsoft.com/sharepoint/advanced-management
- Data Access Governance reports: https://learn.microsoft.com/sharepoint/data-access-governance-reports
- Sensitivity labels with Copilot: https://learn.microsoft.com/purview/sensitivity-labels-teams-groups-sites
- DLP for Copilot: https://learn.microsoft.com/purview/ai-microsoft-purview
- Restricted Access Control: https://learn.microsoft.com/sharepoint/restricted-access-control
- Copilot audit: https://learn.microsoft.com/purview/audit-copilot
- Copilot in Defender XDR: https://learn.microsoft.com/copilot/microsoft-365/microsoft-365-copilot-overview
© vinayaklatthe, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/copilot-for-m365-readiness of vinayaklatthe/microsoft-security-skills.
Open the folder on GitHubat commit 15f16df
Compare with similar skills
Copilot For M365 Readiness next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Copilot For M365 Readiness this skillvinayaklatthe/microsoft-security-skills | 175 | — | ~2.1k | Automated safety check: Pass | MIT | |
| Msgraphcodemie-ai/codemie-code | 294 | — | ~4.1k | Automated safety check: Pass | Apache-2.0 | |
| aai-cli Microsoft 365aai-labs/agent-barn | 109 | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | |
| Workiqmicrosoft/work-iq | 1k | — | ~15k | Automated safety check: Pass | Custom licence | |
| Workiq Previewmicrosoft/work-iq | 1k | — | ~3.3k | Automated safety check: Pass | Custom licence | |
| Msgraph Filesautomateyournetwork/netclaw | 676 | — | ~1k | Automated safety check: Pass | Apache-2.0 |
Similar skills
aai-cli Microsoft 365
aai-labs/agent-barn
Guides work with Outlook, OneDrive, SharePoint, Teams, Excel, To Do and Planner through aai-cli's Microsoft Graph commands, starting from which service owns the data.
- Official
Workiq
microsoft/work-iq
WorkIQ tools for Microsoft 365 workplace data and actions. An agent skill from microsoft/work-iq.
- Official
Workiq Preview
microsoft/work-iq
WorkIQ tools for Microsoft 365 workplace data and actions. An agent skill from microsoft/work-iq.
Msgraph Files
automateyournetwork/netclaw
Read OneDrive and SharePoint files via the Microsoft 365 MCP server — list folder contents, fetch item metadata, inspect versions and sharing permissions.
Msgraph Visio
automateyournetwork/netclaw
Upload and retrieve Visio (.vsdx) and other diagram files in OneDrive/SharePoint via the Microsoft 365 MCP server.
More from vinayaklatthe/microsoft-security-skills
All 50 skills in this repoAPI Security Design
vinayaklatthe/microsoft-security-skills
Guidance for designing secure APIs on Azure - authentication, authorization, gateway controls, input validation, rate limiting, secret management, and runtime threat detection - aligned to OWASP API…
Azure App Service Security
vinayaklatthe/microsoft-security-skills
Guidance for securing Azure App Service web apps and APIs — managed identity, Easy Auth with Microsoft Entra ID, network isolation via private endpoints + VNet integration, HTTPS / TLS hardening…
Azure Arc
vinayaklatthe/microsoft-security-skills
Guidance for Azure Arc — projecting on-premises, multicloud (AWS/GCP), and edge servers, Kubernetes, and data services into Azure Resource Manager for unified governance, security, and management.
Azure Bastion Jit
vinayaklatthe/microsoft-security-skills
Guidance for secure remote VM management in Azure using Azure Bastion combined with Defender for Cloud just-in-time (JIT) VM access.
Azure Confidential Computing
vinayaklatthe/microsoft-security-skills
Guidance for Azure Confidential Computing — protecting data in use through hardware-based Trusted Execution Environments (TEEs).
Azure Ddos Protection
vinayaklatthe/microsoft-security-skills
Guidance for Azure DDoS Protection — Network Protection (per-VNet) and IP Protection (per public IP) tiers built on the same always-on Microsoft platform.
Related
Categories
Questions about Copilot For M365 Readiness
What does Copilot For M365 Readiness do?
Guidance for safely deploying Microsoft 365 Copilot — end-to-end readiness covering oversharing remediation, SharePoint Advanced Management (SAM) restricted sites and content discovery, sensitivity…. Copilot For M365 Readiness is an agent skill from vinayaklatthe/microsoft-security-skills. Guidance for safely deploying Microsoft 365 Copilot — end-to-end readiness covering oversharing remediation, SharePoint Advanced Management (SAM) restricted sites and content discovery, sensitivity label coverage, Purview DLP for Copilot, Restricted SharePoint Search (RSS) interim safeguard, site lifecycle and ownership, Copilot interaction auditing, Copilot in Defender XDR alerts, prompt-shield risks, licensing prerequisites, and a phased rollout that doesn't surface confidential data on day one.
When should I use Copilot For M365 Readiness?
Copilot For M365 Readiness fits situations like: tenant-wide oversharing program design (use m365-oversharing); purview DSPM for AI alone (use purview-dspm-ai); microsoft Foundry agent security (use microsoft-agent-365).
How do I install Copilot For M365 Readiness in Claude Code?
Run `npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a claude-code`. Or copy the skill folder (skills/copilot-for-m365-readiness in vinayaklatthe/microsoft-security-skills) into .claude/skills/copilot-for-m365-readiness in your project. Claude Code loads it when a task matches its description.
How do I install Copilot For M365 Readiness in Codex?
Run `npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a codex`. Or copy the skill folder (skills/copilot-for-m365-readiness in vinayaklatthe/microsoft-security-skills) into .agents/skills/copilot-for-m365-readiness in your project. Codex loads it when a task matches its description.
Can I use Copilot For M365 Readiness in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add vinayaklatthe/microsoft-security-skills --skill copilot-for-m365-readiness -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/copilot-for-m365-readiness, .gemini/skills/copilot-for-m365-readiness, .github/skills/copilot-for-m365-readiness and .opencode/skills/copilot-for-m365-readiness in your project.
What does Copilot For M365 Readiness need to run?
SKILL.md names no scripts, command-line tools or credentials: Copilot For M365 Readiness is instructions for the agent only.
Does Copilot For M365 Readiness access the network?
SKILL.md names 1 domain. As links in the text: learn.microsoft.com. This is read from the text; nothing was executed.
Is Copilot For M365 Readiness safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Copilot For M365 Readiness use?
Copilot For M365 Readiness is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Copilot For M365 Readiness use?
About 2.1k tokens (SKILL.md is roughly 8.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Copilot For M365 Readiness?
Skills that share tags, products or a category with Copilot For M365 Readiness: Msgraph (codemie-ai/codemie-code, 294 stars), aai-cli Microsoft 365 (aai-labs/agent-barn, 109 stars), Workiq (microsoft/work-iq, 1k stars) and Workiq Preview (microsoft/work-iq, 1k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Copilot For M365 Readiness?
vinayaklatthe (a GitHub user) maintains it in vinayaklatthe/microsoft-security-skills, which has 175 GitHub stars. The repository holds 50 skills in this directory. The repository was last updated on June 18, 2026.
Source: vinayaklatthe/microsoft-security-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.