sharepoint
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation and integration examples for the SharePoint connector via Apideck. All identified behaviors, including the use of environment variables for API keys and communication with the vendor's unified API endpoint, align with the skill's stated purpose.- [EXTERNAL_DOWNLOADS]: The skill references the
@apideck/unifyNode.js SDK and provides links to official documentation and specifications onapideck.comandmicrosoft.com. These are recognized vendor and service provider resources.- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for the agent to ingest external data from SharePoint files and folders, which could contain untrusted instructions. - Ingestion points: Data retrieved from SharePoint via
apideck.fileStorage.files.listandapideck.fileStorage.files.searchinSKILL.md. - Boundary markers: None explicitly defined in the provided code snippets.
- Capability inventory: Includes file/folder listing, searching, uploading, and proxy access to Microsoft Graph.
- Sanitization: No explicit sanitization or filtering of external content is described in the skill instructions.
Audit Metadata