TeamsMigration

Warn

Audited by Socket on Mar 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The TeamsMigration tool fragment aligns with its stated purpose of migrating/exporting Teams chat content via MCP and Graph API. Credential on-disk usage and the local notification hook are the primary security considerations. The presence of a trusted notification mechanism and standard token-based authentication are manageable with proper access controls, file permissions, and package integrity checks for the MCP dependency. Recommend configuring strict file permissions for credential caches, enabling package integrity verification (e.g., npm integrity/hash), and documenting a trusted localhost notification endpoint to reduce abuse risk.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 3, 2026, 06:54 AM
Package URL
pkg:socket/skills-sh/julianobarbosa%2Fclaude-code-skills%2Fteamsmigration%2F@c998decb704cc7f1e1e355d61365df9b30cb0ef5