Msgraph
codemie-ai/codemie-code
Work with Microsoft 365 services via the Graph API — emails, calendar events, SharePoint sites (read and write), Teams chats and channel messages, OneDrive files, OneNote notebooks, Planner task…
Guidance for assessing and remediating oversharing before and during Microsoft 365 Copilot adoption, using SharePoint Advanced Management (SAM), sensitivity labels, restricted content discovery, and…
Install Purview Copilot Oversharing
$ npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills purview-copilot-oversharing --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/purview-copilot-oversharing .claude/skills/purview-copilot-oversharing && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "purview-copilot-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/purview-copilot-oversharing into .claude/skills/purview-copilot-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "purview-copilot-oversharing", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/purview-copilot-oversharingType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills purview-copilot-oversharing --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/purview-copilot-oversharing .agents/skills/purview-copilot-oversharing && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "purview-copilot-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/purview-copilot-oversharing into .agents/skills/purview-copilot-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "purview-copilot-oversharing", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills purview-copilot-oversharing --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/purview-copilot-oversharing .cursor/skills/purview-copilot-oversharing && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "purview-copilot-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/purview-copilot-oversharing into .cursor/skills/purview-copilot-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "purview-copilot-oversharing", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/vinayaklatthe/microsoft-security-skills.git --path skills/purview-copilot-oversharing--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills purview-copilot-oversharing --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/purview-copilot-oversharing .gemini/skills/purview-copilot-oversharing && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "purview-copilot-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/purview-copilot-oversharing into .gemini/skills/purview-copilot-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "purview-copilot-oversharing", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install vinayaklatthe/microsoft-security-skills purview-copilot-oversharingInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/purview-copilot-oversharing .github/skills/purview-copilot-oversharing && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "purview-copilot-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/purview-copilot-oversharing into .github/skills/purview-copilot-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "purview-copilot-oversharing", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install vinayaklatthe/microsoft-security-skills purview-copilot-oversharing --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/vinayaklatthe/microsoft-security-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/purview-copilot-oversharing .opencode/skills/purview-copilot-oversharing && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "purview-copilot-oversharing" agent skill from https://github.com/vinayaklatthe/microsoft-security-skills/tree/main/skills/purview-copilot-oversharing into .opencode/skills/purview-copilot-oversharing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "purview-copilot-oversharing", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
purview-copilot-oversharing- GitHub stars
- 175
- Token cost
- ~1.6k tokens
- SKILL.md length
- 659 words
- Files
- 1
- Skills in repo
- 50
- Repo updated
- First seen
- Licence
- MIT
At a glance
Guidance for assessing and remediating oversharing before and during Microsoft 365 Copilot adoption, using SharePoint Advanced Management (SAM), sensitivity labels, restricted content discovery, and…
- Works in 7 steps: Assess - Use SharePoint Advanced… → Engage site owners - Notify owners of… → Classify & label - Apply sensitivity… → …
- The goal is monitoring what sensitive data users are actively sending in AI prompts (use purview-dspm-ai)
- SKILL.md covers When to use, Pick the right oversharing lever, Approach and Guardrails, plus 3 more sections
- Calls make
What it does
Purview Copilot Oversharing is an agent skill from vinayaklatthe/microsoft-security-skills. Guidance for assessing and remediating oversharing before and during Microsoft 365 Copilot adoption, using SharePoint Advanced Management (SAM), sensitivity labels, restricted content discovery, and DLP for Copilot so Copilot only surfaces content users should access. Covers data access governance reports, EEEU cleanup, and ongoing governance. WHEN: Copilot oversharing, prepare data for Copilot, restrict Copilot access, SharePoint Advanced Management, data access governance, oversharing remediation, Copilot…
Its SKILL.md is about 1.6k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Documents & Office, covering Cloud office suites. It works with Microsoft SharePoint and Microsoft 365. The repository describes itself as: Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot. The licence is MIT.
When your agent uses it
- The goal is monitoring what sensitive data users are actively sending in AI prompts (use purview-dspm-ai)
- Tasks that involve Cloud office suites
Example prompts
- “/purview-copilot-oversharing”
Workflow steps
7 steps, taken from the first numbered list in SKILL.md.
- Assess - Use SharePoint Advanced Management (SAM) data access governance reports to
- Engage site owners - Notify owners of risky sites with the remediation expected; do not
- Classify & label - Apply sensitivity labels to sensitive content; container labels for
- Restrict - Use restricted access control / restricted content discovery (RCD) on
- Apply DLP for Copilot - Use DLP for Microsoft 365 Copilot to exclude labelled content from
- Govern lifecycle - Apply site lifecycle/access reviews to prevent regression; set inactive
- Monitor with DSPM for AI - Continuously surface unlabelled sensitive files Copilot can
What it can do on your machine
Read from SKILL.md and the folder at commit 15f16df. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
make
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
learn.microsoft.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Purview Copilot Oversharing loads about 1.6k tokens when it runs. Until then it costs about 224 tokens; SKILL.md has 659 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from vinayaklatthe/microsoft-security-skills at commit 15f16df, republished under its MIT licence (© vinayaklatthe). 659 words, ~1,586 tokens.
Download SKILL.mdSave it as
.claude/skills/purview-copilot-oversharing/SKILL.md (or your agent's skills folder).- name
- purview-copilot-oversharing
- description
- Guidance for assessing and remediating oversharing before and during Microsoft 365 Copilot adoption, using SharePoint Advanced Management (SAM), sensitivity labels, restricted content discovery, and DLP for Copilot so Copilot only surfaces content users should access. Covers data access governance reports, EEEU cleanup, and ongoing governance. WHEN: Copilot oversharing, prepare data for Copilot, restrict Copilot access, SharePoint Advanced Management, data access governance, oversharing remediation, Copilot readiness data security, limit Copilot content, Copilot is surfacing files users should not see, too many people have access to SharePoint sites, tighten up permissions before Copilot rollout, how do I make SharePoint Copilot-ready. DO NOT USE when the goal is monitoring what sensitive data users are actively sending in AI prompts (use purview-dspm-ai).
- license
- MIT
- metadata.author
- Microsoft
- metadata.version
- 0.1.0
Microsoft 365 Copilot Oversharing Controls
Microsoft 365 Copilot honours existing permissions - so if content is overshared, Copilot can surface it to users who technically have access but shouldn't. This skill covers reducing that blast radius before and during Copilot rollout using SharePoint Advanced Management, sensitivity labels, restricted content discovery, and DLP for Copilot.
When to use
Preparing a tenant for Microsoft 365 Copilot and continuously controlling what Copilot can reach across SharePoint, OneDrive, and Teams.
Do not use this skill to monitor sensitive data in prompts (use purview-dspm-ai) or to design a
broader DLP program (use purview-dlp-policy).
Pick the right oversharing lever
| Symptom | Lever |
|---|---|
| "Everyone except external users" (EEEU) on too many sites | SAM data access governance report + permission cleanup |
| Sensitive content in broadly shared sites | Sensitivity labels (encrypt) + container labels for sites |
| Site shows up in Copilot results when it shouldn't | Restricted content discovery (RCD) on the site |
| Labelled content should be excluded from Copilot grounding | DLP for Microsoft 365 Copilot |
| Sharing links sprawl | SAM sharing link report + cleanup policies |
Rule of thumb: assess (DAG report) -> classify (labels) -> restrict (RCD, link policy) -> exclude (DLP for Copilot) -> govern (site lifecycle). Skipping the assess step is the most common failure.
Approach
- Assess - Use SharePoint Advanced Management (SAM) data access governance reports to find oversharing: "everyone/EEEU" access, broadly shared sites, sharing links, and permissioned but sensitive content. Verify: DAG report identifies top-N risky sites with owners.
- Engage site owners - Notify owners of risky sites with the remediation expected; do not remediate centrally without owner context. Verify: owner remediation tickets/issues opened with deadline.
- Classify & label - Apply sensitivity labels to sensitive content; container labels for sites; labels can encrypt and restrict, and Copilot respects label permissions. Verify: top-tier label encrypts and Copilot cannot surface the file to unauthorised test user.
- Restrict - Use restricted access control / restricted content discovery (RCD) on sensitive sites, tighten "everyone except external users" grants, and clean up sharing links. Verify: RCD-flagged site no longer appears in test user's Copilot answers.
- Apply DLP for Copilot - Use DLP for Microsoft 365 Copilot to exclude labelled content from Copilot processing where required. Verify: a test prompt referencing labelled content is excluded or warned.
- Govern lifecycle - Apply site lifecycle/access reviews to prevent regression; set inactive site policies in SAM. Verify: inactive sites archived or owners re-attested per cadence.
- Monitor with DSPM for AI - Continuously surface unlabelled sensitive files Copilot can access; loop back to label + restrict. Verify: weekly DSPM for AI report shrinks unlabelled-sensitive count.
Show full SKILL.md (241 more words)Show less
Guardrails
- Remediate oversharing before broad Copilot enablement; a pilot can proceed on a scoped, clean set of sites but tenant-wide turn-on without assessment generates user complaints fast.
- Sensitivity-label encryption is the strongest control - Copilot can't use content the user can't decrypt/extract; reserve for genuinely sensitive content.
- Oversharing control is ongoing governance, not a one-time cleanup - new sites are created daily and sharing links sprawl without policy.
- Coordinate with site owners; bulk permission stripping from the centre breaks legitimate collaboration and erodes trust in the program.
- SAM is licensed separately (E5 / standalone SKU) - confirm before assuming reports are available.
Common anti-patterns
- Enabling Copilot tenant-wide and then trying to remediate oversharing - users have already seen the wrong files.
- Running the DAG report once, fixing the top 20 sites, and declaring done.
- Encrypting everything with the top label "to be safe" - breaks external collaboration and Copilot grounding alike.
- Restricted content discovery applied to half the tenant - users complain Copilot is useless.
- Ignoring sharing links because the report is long.
Example prompts
Make SharePoint Copilot-ready by remediating oversharing.Use SharePoint Advanced Management to tighten site permissions before Copilot.How do I stop Copilot surfacing files users should not see?Run data access governance to limit Copilot content.Apply restricted content discovery to a sensitive site.
Microsoft Learn
- Copilot data protection considerations: https://learn.microsoft.com/purview/ai-microsoft-purview-considerations
- SharePoint Advanced Management: https://learn.microsoft.com/sharepoint/advanced-management
- Data access governance reports: https://learn.microsoft.com/sharepoint/data-access-governance-reports
- Restricted content discovery: https://learn.microsoft.com/sharepoint/restricted-content-discovery
- Prepare for Copilot: https://learn.microsoft.com/copilot/microsoft-365/microsoft-365-copilot-requirements
- DLP for Microsoft 365 (overview): https://learn.microsoft.com/purview/dlp-learn-about-dlp
© vinayaklatthe, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/purview-copilot-oversharing of vinayaklatthe/microsoft-security-skills.
Open the folder on GitHubat commit 15f16df
Compare with similar skills
Purview Copilot Oversharing next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Purview Copilot Oversharing this skillvinayaklatthe/microsoft-security-skills | 175 | — | ~1.6k | Automated safety check: Pass | MIT | |
| Msgraphcodemie-ai/codemie-code | 294 | — | ~4.1k | Automated safety check: Pass | Apache-2.0 | |
| aai-cli Microsoft 365aai-labs/agent-barn | 109 | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | |
| Workiqmicrosoft/work-iq | 1k | — | ~15k | Automated safety check: Pass | Custom licence | |
| Workiq Previewmicrosoft/work-iq | 1k | — | ~3.3k | Automated safety check: Pass | Custom licence | |
| Msgraph Filesautomateyournetwork/netclaw | 676 | — | ~1k | Automated safety check: Pass | Apache-2.0 |
Similar skills
aai-cli Microsoft 365
aai-labs/agent-barn
Guides work with Outlook, OneDrive, SharePoint, Teams, Excel, To Do and Planner through aai-cli's Microsoft Graph commands, starting from which service owns the data.
- Official
Workiq
microsoft/work-iq
WorkIQ tools for Microsoft 365 workplace data and actions. An agent skill from microsoft/work-iq.
- Official
Workiq Preview
microsoft/work-iq
WorkIQ tools for Microsoft 365 workplace data and actions. An agent skill from microsoft/work-iq.
Msgraph Files
automateyournetwork/netclaw
Read OneDrive and SharePoint files via the Microsoft 365 MCP server — list folder contents, fetch item metadata, inspect versions and sharing permissions.
Msgraph Visio
automateyournetwork/netclaw
Upload and retrieve Visio (.vsdx) and other diagram files in OneDrive/SharePoint via the Microsoft 365 MCP server.
More from vinayaklatthe/microsoft-security-skills
All 50 skills in this repoAPI Security Design
vinayaklatthe/microsoft-security-skills
Guidance for designing secure APIs on Azure - authentication, authorization, gateway controls, input validation, rate limiting, secret management, and runtime threat detection - aligned to OWASP API…
Azure App Service Security
vinayaklatthe/microsoft-security-skills
Guidance for securing Azure App Service web apps and APIs — managed identity, Easy Auth with Microsoft Entra ID, network isolation via private endpoints + VNet integration, HTTPS / TLS hardening…
Azure Arc
vinayaklatthe/microsoft-security-skills
Guidance for Azure Arc — projecting on-premises, multicloud (AWS/GCP), and edge servers, Kubernetes, and data services into Azure Resource Manager for unified governance, security, and management.
Azure Bastion Jit
vinayaklatthe/microsoft-security-skills
Guidance for secure remote VM management in Azure using Azure Bastion combined with Defender for Cloud just-in-time (JIT) VM access.
Azure Confidential Computing
vinayaklatthe/microsoft-security-skills
Guidance for Azure Confidential Computing — protecting data in use through hardware-based Trusted Execution Environments (TEEs).
Azure Ddos Protection
vinayaklatthe/microsoft-security-skills
Guidance for Azure DDoS Protection — Network Protection (per-VNet) and IP Protection (per public IP) tiers built on the same always-on Microsoft platform.
Related
Works with
Categories
Questions about Purview Copilot Oversharing
What does Purview Copilot Oversharing do?
Guidance for assessing and remediating oversharing before and during Microsoft 365 Copilot adoption, using SharePoint Advanced Management (SAM), sensitivity labels, restricted content discovery, and…. Purview Copilot Oversharing is an agent skill from vinayaklatthe/microsoft-security-skills. Guidance for assessing and remediating oversharing before and during Microsoft 365 Copilot adoption, using SharePoint Advanced Management (SAM), sensitivity labels, restricted content discovery, and DLP for Copilot so Copilot only surfaces content users should access.
When should I use Purview Copilot Oversharing?
Purview Copilot Oversharing fits situations like: the goal is monitoring what sensitive data users are actively sending in AI prompts (use purview-dspm-ai); tasks that involve Cloud office suites.
How do I install Purview Copilot Oversharing in Claude Code?
Run `npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a claude-code`. Or copy the skill folder (skills/purview-copilot-oversharing in vinayaklatthe/microsoft-security-skills) into .claude/skills/purview-copilot-oversharing in your project. Claude Code loads it when a task matches its description.
How do I install Purview Copilot Oversharing in Codex?
Run `npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a codex`. Or copy the skill folder (skills/purview-copilot-oversharing in vinayaklatthe/microsoft-security-skills) into .agents/skills/purview-copilot-oversharing in your project. Codex loads it when a task matches its description.
Can I use Purview Copilot Oversharing in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add vinayaklatthe/microsoft-security-skills --skill purview-copilot-oversharing -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/purview-copilot-oversharing, .gemini/skills/purview-copilot-oversharing, .github/skills/purview-copilot-oversharing and .opencode/skills/purview-copilot-oversharing in your project.
What does Purview Copilot Oversharing need to run?
Going by SKILL.md and its folder, Purview Copilot Oversharing needs the command-line tools its instructions call (make).
Does Purview Copilot Oversharing access the network?
SKILL.md names 1 domain. As links in the text: learn.microsoft.com. This is read from the text; nothing was executed.
Is Purview Copilot Oversharing safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Purview Copilot Oversharing use?
Purview Copilot Oversharing is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Purview Copilot Oversharing use?
About 1.6k tokens (SKILL.md is roughly 6.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Purview Copilot Oversharing?
Skills that share tags, products or a category with Purview Copilot Oversharing: Msgraph (codemie-ai/codemie-code, 294 stars), aai-cli Microsoft 365 (aai-labs/agent-barn, 109 stars), Workiq (microsoft/work-iq, 1k stars) and Workiq Preview (microsoft/work-iq, 1k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Purview Copilot Oversharing?
vinayaklatthe (a GitHub user) maintains it in vinayaklatthe/microsoft-security-skills, which has 175 GitHub stars. The repository holds 50 skills in this directory. The repository was last updated on June 18, 2026.
Source: vinayaklatthe/microsoft-security-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.