Msgraph
codemie-ai/codemie-code
Work with Microsoft 365 services via the Graph API — emails, calendar events, SharePoint sites (read and write), Teams chats and channel messages, OneDrive files, OneNote notebooks, Planner task…
Guidance for remediating oversharing across Microsoft 365 (SharePoint, OneDrive, Teams, Exchange) using the Secure & Governed Data Foundation blueprint - a three-pillar program (remediate…
Install M365 Oversharing
$ npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills m365-oversharing --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/m365-oversharing .claude/skills/m365-oversharing && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "m365-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/m365-oversharing into .claude/skills/m365-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "m365-oversharing", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/m365-oversharingType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills m365-oversharing --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/m365-oversharing .agents/skills/m365-oversharing && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "m365-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/m365-oversharing into .agents/skills/m365-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "m365-oversharing", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills m365-oversharing --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/m365-oversharing .cursor/skills/m365-oversharing && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "m365-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/m365-oversharing into .cursor/skills/m365-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "m365-oversharing", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/vinayaklatthe/microsoft-security-skills.git --path skills/m365-oversharing--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills m365-oversharing --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/m365-oversharing .gemini/skills/m365-oversharing && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "m365-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/m365-oversharing into .gemini/skills/m365-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "m365-oversharing", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install vinayaklatthe/microsoft-security-skills m365-oversharingInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/m365-oversharing .github/skills/m365-oversharing && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "m365-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/m365-oversharing into .github/skills/m365-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "m365-oversharing", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills m365-oversharing --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/m365-oversharing .opencode/skills/m365-oversharing && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "m365-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/m365-oversharing into .opencode/skills/m365-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "m365-oversharing", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
m365-oversharing- GitHub stars
- 175
- Token cost
- ~1.8k tokens
- SKILL.md length
- 737 words
- Files
- 1
- Skills in repo
- 50
- Repo updated
- First seen
- Licence
- MIT
At a glance
Guidance for remediating oversharing across Microsoft 365 (SharePoint, OneDrive, Teams, Exchange) using the Secure & Governed Data Foundation blueprint - a three-pillar program (remediate…
- Works in 7 steps: Assess (DAG reports) - Run SharePoint… → Apply interim restrictions - For the… → Engage site owners - Notify owners with… → …
- Copilot-specific readiness framing only (use purview-copilot-oversharing)
- SKILL.md covers When to use, The three pillars, Approach and Guardrails, plus 3 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
M365 Oversharing is an agent skill from vinayaklatthe/microsoft-security-skills. Guidance for remediating oversharing across Microsoft 365 (SharePoint, OneDrive, Teams, Exchange) using the Secure & Governed Data Foundation blueprint - a three-pillar program (remediate oversharing, set up guardrails, meet regulations) built on SharePoint Advanced Management data access governance, sensitivity and container labels, secure-by-default labelling, Restricted Access Control, and Microsoft Purview. WHEN: Microsoft 365 oversharing, M365 oversharing, secure and governed data foundation, oversharing…
Its SKILL.md is about 1.8k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Documents & Office, covering Cloud office suites. It works with Microsoft 365, Microsoft SharePoint and Microsoft OneDrive. The repository describes itself as: Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot. The licence is MIT.
When your agent uses it
- Copilot-specific readiness framing only (use purview-copilot-oversharing)
- Building a broad DLP program (use purview-dlp-policy)
Example prompts
- “/m365-oversharing”
Workflow steps
7 steps, taken from the first numbered list in SKILL.md.
- Assess (DAG reports) - Run SharePoint Advanced Management data access governance
- Apply interim restrictions - For the highest-risk sites, apply **Restricted Access
- Engage site owners - Notify owners with the expected fix; don't strip permissions centrally
- Classify & label - Apply sensitivity labels to sensitive content and container labels to
- Secure by default - Use secure-by-default labelling (derive labels from SharePoint
- Govern lifecycle - Apply site lifecycle and inactive-site policies plus access reviews so
- Meet regulations & monitor - Use Purview Audit and Compliance Manager to close audit/legal
What it can do on your machine
Read from SKILL.md and the folder at commit 15f16df. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
learn.microsoft.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
M365 Oversharing loads about 1.8k tokens when it runs. Until then it costs about 238 tokens; SKILL.md has 737 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from vinayaklatthe/microsoft-security-skills at commit 15f16df, republished under its MIT licence (© vinayaklatthe). 737 words, ~1,823 tokens.
Download SKILL.mdSave it as
.claude/skills/m365-oversharing/SKILL.md (or your agent's skills folder).- name
- m365-oversharing
- description
- Guidance for remediating oversharing across Microsoft 365 (SharePoint, OneDrive, Teams, Exchange) using the Secure & Governed Data Foundation blueprint - a three-pillar program (remediate oversharing, set up guardrails, meet regulations) built on SharePoint Advanced Management data access governance, sensitivity and container labels, secure-by-default labelling, Restricted Access Control, and Microsoft Purview. WHEN: Microsoft 365 oversharing, M365 oversharing, secure and governed data foundation, oversharing blueprint, too many people have access to SharePoint, EEEU everyone except external users, tighten permissions, data access governance report, restricted content discovery, secure by default labels, prepare data foundation, reduce sharing link sprawl, governed data estate. DO NOT USE for Copilot-specific readiness framing only (use purview-copilot-oversharing) or building a broad DLP program (use purview-dlp-policy).
- license
- MIT
- metadata.author
- Microsoft
- metadata.version
- 0.1.0
Microsoft 365 Oversharing Remediation
Oversharing - content shared more broadly than it should be - is the root cause of most data exposure in Microsoft 365 and the biggest risk amplified by AI. Microsoft's Secure & Governed Data Foundation blueprint structures remediation into three pillars: remediate oversharing, set up guardrails, and meet regulations. The work is powered by SharePoint Advanced Management (SAM, included with a Microsoft 365 Copilot license), sensitivity and container labels, and Microsoft Purview.
When to use
Building a secure, well-governed Microsoft 365 data estate - reducing who can reach what across SharePoint, OneDrive, Teams, and Exchange, then keeping it that way with enforceable defaults. Applies whether or not Copilot is in scope; it is the data-foundation work every AI or data program depends on.
Do not use this skill when the question is purely Copilot rollout readiness framing (use
purview-copilot-oversharing), monitoring sensitive data in AI prompts (use purview-dspm-ai),
or designing a tenant-wide DLP program (use purview-dlp-policy).
The three pillars
| Pillar | Goal | Primary levers |
|---|---|---|
| Remediate oversharing | Find and reduce existing over-broad access fast | SAM data access governance (DAG) reports, EEEU cleanup, sharing-link cleanup, Restricted Access Control / Restricted Content Discovery |
| Set up guardrails | Prevent regression with enforceable defaults | Sensitivity + container labels, secure-by-default labelling, default sharing settings, site lifecycle policies |
| Meet regulations | Close audit/legal and AI-regulatory gaps | Purview Audit, Compliance Manager assessments, data hygiene |
Rule of thumb: assess -> classify -> restrict -> default-secure -> govern. Skipping the assess (DAG report) step is the most common failure; encrypting everything "to be safe" is the second.
Approach
- Assess (DAG reports) - Run SharePoint Advanced Management data access governance reports to find the riskiest sites: "Everyone Except External Users" (EEEU) on too many sites, broadly shared sites, sharing-link sprawl, and permissioned-but-sensitive content. Verify: DAG report ranks top-N risky sites with named owners.
- Apply interim restrictions - For the highest-risk sites, apply Restricted Access Control / Restricted Content Discovery as a fast interim guardrail while owners remediate. Verify: a restricted site no longer surfaces in a test user's search/Copilot results.
- Engage site owners - Notify owners with the expected fix; don't strip permissions centrally without owner context - that breaks legitimate collaboration and erodes trust. Verify: owner remediation tickets opened with deadlines.
- Classify & label - Apply sensitivity labels to sensitive content and container labels to sites; reserve encryption for genuinely sensitive content. Verify: a top-tier label encrypts and blocks unauthorised access.
- Secure by default - Use secure-by-default labelling (derive labels from SharePoint sites) and tighten default sharing settings so new content is protected without relying on users to remember to label. Verify: newly created content inherits a default label/sharing scope.
- Govern lifecycle - Apply site lifecycle and inactive-site policies plus access reviews so oversharing doesn't creep back; this is ongoing governance, not a one-time cleanup. Verify: inactive sites archived or owners re-attested on cadence.
- Meet regulations & monitor - Use Purview Audit and Compliance Manager to close audit/legal and AI-regulatory gaps, and monitor for new oversharing continuously. Verify: audit/regulatory assessment shows reducing exposure over time.
Show full SKILL.md (246 more words)Show less
Guardrails
- Remediate before broad enablement of AI/Copilot; a clean, scoped pilot can proceed, but tenant-wide turn-on without assessment generates complaints fast.
- Assess first - running remediation without the DAG report means you fix the wrong things.
- Don't encrypt everything with the top label "to be safe" - it breaks external collaboration and legitimate sharing; secure-by-default labelling plus exception handling scales better.
- Coordinate with site owners; centralised bulk permission stripping breaks collaboration.
- SAM is licensed (included with Microsoft 365 Copilot, or a standalone/E5 SKU) - confirm availability before assuming reports exist.
- Oversharing control is continuous governance - new sites and sharing links appear daily.
Common anti-patterns
- Running the DAG report once, fixing the top 20 sites, and declaring done.
- Enabling Copilot or a new data program tenant-wide and remediating oversharing afterwards.
- Restricted Content Discovery applied across half the tenant - users complain search is useless.
- Training users on "when to protect" instead of deriving secure-by-default labels.
- Ignoring sharing-link sprawl because the report is long.
Example prompts
Remediate oversharing across Microsoft 365 using the secure and governed data foundation blueprint.Use SharePoint Advanced Management data access governance to find over-broad access.Set up secure-by-default labelling so new SharePoint content is protected automatically.Clean up "Everyone except external users" and sharing-link sprawl.Build enforceable guardrails to stop oversharing regression.
Microsoft Learn
- Secure & governed data foundation (oversharing blueprint): https://learn.microsoft.com/en-us/microsoft-365/copilot/secure-govern-copilot-foundational-deployment-guidance
- Configure a secure and governed foundation: https://learn.microsoft.com/en-us/microsoft-365/copilot/configure-secure-governed-data-foundation-microsoft-365-copilot
- Purview blueprint - secure by default: https://learn.microsoft.com/en-us/purview/deploymentmodels/depmod-securebydefault-intro
- SharePoint Advanced Management: https://learn.microsoft.com/sharepoint/advanced-management
- Data access governance reports: https://learn.microsoft.com/sharepoint/data-access-governance-reports
- Restricted content discovery: https://learn.microsoft.com/sharepoint/restricted-content-discovery
© vinayaklatthe, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/m365-oversharing of vinayaklatthe/microsoft-security-skills.
Open the folder on GitHubat commit 15f16df
Compare with similar skills
M365 Oversharing next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| M365 Oversharing this skillvinayaklatthe/microsoft-security-skills | 175 | — | ~1.8k | Automated safety check: Pass | MIT | |
| Msgraphcodemie-ai/codemie-code | 294 | — | ~4.1k | Automated safety check: Pass | Apache-2.0 | |
| aai-cli Microsoft 365aai-labs/agent-barn | 109 | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | |
| Workiqmicrosoft/work-iq | 1k | — | ~15k | Automated safety check: Pass | Custom licence | |
| Workiq Previewmicrosoft/work-iq | 1k | — | ~3.3k | Automated safety check: Pass | Custom licence | |
| Msgraph Filesautomateyournetwork/netclaw | 676 | — | ~1k | Automated safety check: Pass | Apache-2.0 |
Similar skills
aai-cli Microsoft 365
aai-labs/agent-barn
Guides work with Outlook, OneDrive, SharePoint, Teams, Excel, To Do and Planner through aai-cli's Microsoft Graph commands, starting from which service owns the data.
- Official
Workiq
microsoft/work-iq
WorkIQ tools for Microsoft 365 workplace data and actions. An agent skill from microsoft/work-iq.
- Official
Workiq Preview
microsoft/work-iq
WorkIQ tools for Microsoft 365 workplace data and actions. An agent skill from microsoft/work-iq.
Msgraph Files
automateyournetwork/netclaw
Read OneDrive and SharePoint files via the Microsoft 365 MCP server — list folder contents, fetch item metadata, inspect versions and sharing permissions.
Msgraph Visio
automateyournetwork/netclaw
Upload and retrieve Visio (.vsdx) and other diagram files in OneDrive/SharePoint via the Microsoft 365 MCP server.
More from vinayaklatthe/microsoft-security-skills
All 50 skills in this repoAPI Security Design
vinayaklatthe/microsoft-security-skills
Guidance for designing secure APIs on Azure - authentication, authorization, gateway controls, input validation, rate limiting, secret management, and runtime threat detection - aligned to OWASP API…
Azure App Service Security
vinayaklatthe/microsoft-security-skills
Guidance for securing Azure App Service web apps and APIs — managed identity, Easy Auth with Microsoft Entra ID, network isolation via private endpoints + VNet integration, HTTPS / TLS hardening…
Azure Arc
vinayaklatthe/microsoft-security-skills
Guidance for Azure Arc — projecting on-premises, multicloud (AWS/GCP), and edge servers, Kubernetes, and data services into Azure Resource Manager for unified governance, security, and management.
Azure Bastion Jit
vinayaklatthe/microsoft-security-skills
Guidance for secure remote VM management in Azure using Azure Bastion combined with Defender for Cloud just-in-time (JIT) VM access.
Azure Confidential Computing
vinayaklatthe/microsoft-security-skills
Guidance for Azure Confidential Computing — protecting data in use through hardware-based Trusted Execution Environments (TEEs).
Azure Ddos Protection
vinayaklatthe/microsoft-security-skills
Guidance for Azure DDoS Protection — Network Protection (per-VNet) and IP Protection (per public IP) tiers built on the same always-on Microsoft platform.
Related
Categories
Questions about M365 Oversharing
What does M365 Oversharing do?
Guidance for remediating oversharing across Microsoft 365 (SharePoint, OneDrive, Teams, Exchange) using the Secure & Governed Data Foundation blueprint - a three-pillar program (remediate…. M365 Oversharing is an agent skill from vinayaklatthe/microsoft-security-skills. Guidance for remediating oversharing across Microsoft 365 (SharePoint, OneDrive, Teams, Exchange) using the Secure & Governed Data Foundation blueprint - a three-pillar program (remediate oversharing, set up guardrails, meet regulations) built on SharePoint Advanced Management data access governance, sensitivity and container labels, secure-by-default labelling, Restricted Access Control, and Microsoft Purview.
When should I use M365 Oversharing?
M365 Oversharing fits situations like: copilot-specific readiness framing only (use purview-copilot-oversharing); building a broad DLP program (use purview-dlp-policy).
How do I install M365 Oversharing in Claude Code?
Run `npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a claude-code`. Or copy the skill folder (skills/m365-oversharing in vinayaklatthe/microsoft-security-skills) into .claude/skills/m365-oversharing in your project. Claude Code loads it when a task matches its description.
How do I install M365 Oversharing in Codex?
Run `npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a codex`. Or copy the skill folder (skills/m365-oversharing in vinayaklatthe/microsoft-security-skills) into .agents/skills/m365-oversharing in your project. Codex loads it when a task matches its description.
Can I use M365 Oversharing in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add vinayaklatthe/microsoft-security-skills --skill m365-oversharing -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/m365-oversharing, .gemini/skills/m365-oversharing, .github/skills/m365-oversharing and .opencode/skills/m365-oversharing in your project.
What does M365 Oversharing need to run?
SKILL.md names no scripts, command-line tools or credentials: M365 Oversharing is instructions for the agent only.
Does M365 Oversharing access the network?
SKILL.md names 1 domain. As links in the text: learn.microsoft.com. This is read from the text; nothing was executed.
Is M365 Oversharing safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does M365 Oversharing use?
M365 Oversharing is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does M365 Oversharing use?
About 1.8k tokens (SKILL.md is roughly 7.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to M365 Oversharing?
Skills that share tags, products or a category with M365 Oversharing: Msgraph (codemie-ai/codemie-code, 294 stars), aai-cli Microsoft 365 (aai-labs/agent-barn, 109 stars), Workiq (microsoft/work-iq, 1k stars) and Workiq Preview (microsoft/work-iq, 1k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains M365 Oversharing?
vinayaklatthe (a GitHub user) maintains it in vinayaklatthe/microsoft-security-skills, which has 175 GitHub stars. The repository holds 50 skills in this directory. The repository was last updated on June 18, 2026.
Source: vinayaklatthe/microsoft-security-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.