技能详情(站内镜像,无评论)
作者:Abdelkrim from Brussels @Abdelkrim
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v0.3.0
统计:⭐ 0 · 81 · 0 current installs · 0 all-time installs
⭐ 0
安装量(当前) 0
🛡 VirusTotal :良性 · OpenClaw :良性
Package:abdelkrim/m365-task-manager-by-altf1be
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :良性
OpenClaw 评估
The skill's code, requested environment variables, and instructions are coherent with a Microsoft Graph To Do CLI: required values and local token caching match the described purpose and there are no unexpected network endpoints or unrelated credentials requested.
目的
Name/description (M365 To Do CRUD) align with the included scripts. The env vars (M365_TENANT_ID, M365_CLIENT_ID) and the Microsoft Graph endpoints in the code are appropriate for the stated purpose.
说明范围
SKILL.md instructs the user to register an app, grant delegated Graph scopes, set the two env vars, run npm install, and use the provided CLI commands. Runtime code only accesses the declared env vars and interacts with Microsoft identity (login.microsoftonline.com) and Graph (graph.microsoft.com). The only extra behavior is local token caching (documented).
安装机制
There is no registry install spec (instruction-only), and the code uses standard Node packages (msal-node implied). No arbitrary downloads or extract-from-URL actions are present in the skill bundle. The user must run npm install locally; review package.json before installing.
证书
Requested env vars are limited to tenant and client ID (plus an optional token cache path). No client secrets or unrelated credentials are required. These are proportionate for a delegated device-code flow.
持久
always is false. The skill persists tokens to a local cache file (default: ~/.cache/openclaw/m365-task-manager-token.json). This is expected for offline reuse but means long-lived tokens/refresh tokens are stored on disk; check file location and permissions if that is a concern.
scripts/m365-todo.mjs:60
Environment variable access combined with network send.
scripts/m365-todo.mjs:79
File read combined with network send (possible exfiltration).
综合结论
This skill appears to do exactly what it says: it uses delegated Device Code flow and Microsoft Graph to create and manage To Do tasks. Before installing: (1) inspect the package.json and dependency versions that npm will install (msal-node and any transitive deps); (2) ensure the Entra app registration only has the listed delegated scopes (Tasks.ReadWrite, User.Read, offline_access) and is configured as a public client if you don't want to su…
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「M365 (Microsoft) Task Manager by altf1be」。简介:Manage lightweight Microsoft 365 task workflows with Microsoft To Do and Planne…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/abdelkrim/m365-task-manager-by-altf1be/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
---
name: m365-task-manager-by-altf1be
description: "Manage lightweight Microsoft 365 task workflows with Microsoft To Do and Planner. Use when a user needs to quickly create, assign, track, and follow up operational tasks in M365 with clear owners, due dates, status, and daily reminders."
homepage: https://github.com/ALT-F1-OpenClaw/openclaw-skill-m365-task-manager
metadata:
{"openclaw": {"emoji": "✅", "requires": {"env": ["M365_TENANT_ID", "M365_CLIENT_ID"]}, "optional": {"env": ["M365_TOKEN_CACHE_PATH"]}, "primaryEnv": "M365_TENANT_ID"}}
---
# M365 Task Manager
Use this skill to perform real Microsoft Graph CRUD operations for Microsoft To Do tasks.
## Setup
1. Create an Entra app registration for delegated sign-in.
2. Add Microsoft Graph delegated permissions:
- `Tasks.ReadWrite`
- `User.Read`
- `offline_access`
3. Configure environment variables:
```bash
M365_TENANT_ID=your-tenant-id-or-common
M365_CLIENT_ID=your-public-client-app-id
# optional
M365_TOKEN_CACHE_PATH=/home/user/.cache/openclaw/m365-task-manager-token.json
```
4. Install dependencies at repo root:
```bash
npm install
```
On first run, the script uses Device Code login and caches tokens for reuse.
## Commands
```bash
# profile connection
node skills/m365-task-manager/scripts/m365-todo.mjs info
# list Microsoft To Do lists
node skills/m365-task-manager/scripts/m365-todo.mjs lists
# list tasks
node skills/m365-task-manager/scripts/m365-todo.mjs tasks:list --list-name "Tasks"
# create task
node skills/m365-task-manager/scripts/m365-todo.mjs tasks:create --list-name "Tasks" --title "2026-03-01-submit-weekly-status-report" --due 2026-03-01
# update task
node skills/m365-task-manager/scripts/m365-todo.mjs tasks:update --list-name "Tasks" --task-id <TASK_ID> --status inProgress
# delete task
node skills/m365-task-manager/scripts/m365-todo.mjs tasks:delete --list-name "Tasks" --task-id <TASK_ID>
```
## Operating standard
- Task title pattern: `<project>-<date>-<person>-<action>`
- Required fields: title, owner, due date, status
- Status values: `Open`, `In Progress`, `Blocked`, `Done`
## References
- `references/playbook.md` for operating guidance.
## Scripts
- `scripts/m365-todo.mjs` for Graph CRUD on Microsoft To Do.
- `scripts/format-task-name.sh` for deterministic task naming.
## Author
Abdelkrim BOUJRAF - ALT-F1 SRL - https://www.alt-f1.be
## License
MIT